Re: Fwd: question about mysql_enum module

[Marc Wickenden <marc () offensivecoder com>]

On 27/06/2012 10:51, Sunil Kumar wrote:
> [-] MySQL Error: RbMysql::DbaccessDeniedError Access denied for user
> > 'mulemanager'@'%' to database 'mysql'

This is the key line. The user you are accessing the database with -
mulemanager - does not have permission to access the mysql database.

This is normal, unless you have specifically granted permission users
other than 'root' do not have permission to use the mysql database and
therefore cannot select from mysql.user, etc. This does not
(necessarily) mean the 'mysql' database does not exist.

Your choices therefore are:

1) escalate your privilege to root /somehow/
2) run a different module
3) try something else!

It depends what your goal is. I'm not familiar with this particular VM
but it may be the information you need is available in the mulemanager
database without the need for priv esc.

Why don't you try enumerating the databases you do have permission to
access and see what information that provides?

auxiliary/scanner/mysql_schemadump

Marc
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework