Metasploit mailing list archives

mysql_enum and mysql_sql error


From: Amin <amin () zitune ch>
Date: Thu, 07 Jan 2010 10:16:51 +0100

Hi All,

the auxiliary/admin/mysql/mysql_sql and auxiliary/admin/mysql/mysql_enum modules fail to connect to the mysql server. What am i missing here?

Meilleurs salutations,
Amin
--------------------------------------------------
                                  _       _
             _                   | |     (_)_
 ____   ____| |_  ____  ___ ____ | | ___  _| |_
|    \ / _  )  _)/ _  |/___)  _ \| |/ _ \| |  _)
| | | ( (/ /| |_( ( | |___ | | | | | |_| | | |__
|_|_|_|\____)\___)_||_(___/| ||_/|_|\___/|_|\___)
                           |_|


       =[ metasploit v3.3.4-dev [core:3.3 api:1.0]
+ -- --=[ 490 exploits - 225 auxiliary
+ -- --=[ 192 payloads - 23 encoders - 8 nops
       =[ svn r8082 updated today (2010.01.07)

msf > use auxiliary/scanner/mysql/version
msf auxiliary(version) > set RHOSTS localhost
RHOSTS => localhost
msf auxiliary(version) > run

[*] 127.0.0.1:3306 is running MySQL 5.1.42 (protocol 10)
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf auxiliary(version) > back
msf > use auxiliary/scanner/mysql/mysql_login
msf auxiliary(mysql_login) > set RHOSTS localhost
RHOSTS => localhost
msf auxiliary(mysql_login) > set MYSQL_PASS Cothiew1
MYSQL_PASS => Cothiew1
msf auxiliary(mysql_login) > run

[*] 127.0.0.1:3306 successful logged in as 'root' with password 'Cothiew1'
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf auxiliary(mysql_login) > back
msf > use auxiliary/admin/mysql/mysql_sql
msf auxiliary(mysql_sql) > setg RHOST localhost
RHOST => localhost
msf auxiliary(mysql_sql) > setg MYSQL_PASS Cothiew1
MYSQL_PASS => Cothiew1
msf auxiliary(mysql_sql) > show options

Module options:

   Name        Current Setting   Required  Description
   ----        ---------------   --------  -----------
MYSQL_PASS Cothiew1 no The password for the specified username
   MYSQL_USER  root              yes       The username to authenticate as
   RHOST       localhost         yes       The target address
   RPORT       3306              yes       The target port
   SQL         select version()  yes       The SQL to execute.

msf auxiliary(mysql_sql) > run

[-] Auxiliary failed: TypeError can't convert Socket into String
[-] Call stack:
[-]   /root/msf/lib/rbmysql/protocol.rb:191:in `initialize'
[-]   /root/msf/lib/rbmysql/protocol.rb:191:in `new'
[-]   /root/msf/lib/rbmysql/protocol.rb:191:in `initialize'
[-]   /usr/lib/ruby/1.8/timeout.rb:48:in `timeout'
[-]   /root/msf/lib/rbmysql/protocol.rb:188:in `initialize'
[-]   /root/msf/lib/rbmysql.rb:148:in `new'
[-]   /root/msf/lib/rbmysql.rb:148:in `connect'
[-]   /root/msf/lib/rbmysql.rb:88:in `connect'
[-]   /root/msf/lib/msf/core/exploit/mysql.rb:42:in `mysql_login'
[-]   /root/msf/lib/msf/core/exploit/mysql.rb:58:in `mysql_login_datastore'
[-]   (eval):39:in `run'
[*] Auxiliary module execution completed
msf auxiliary(mysql_sql) > back
msf > use auxiliary/admin/mysql/mysql_enum
msf auxiliary(mysql_enum) > show options

Module options:

   Name        Current Setting  Required  Description
   ----        ---------------  --------  -----------
MYSQL_PASS Cothiew1 no The password for the specified username
   MYSQL_USER  root              yes       The username to authenticate as
   RHOST       localhost         yes       The target address
   RPORT       3306              yes       The target port
   SQL         select version()  yes       The SQL to execute.

msf auxiliary(mysql_sql) > run

[-] Auxiliary failed: TypeError can't convert Socket into String
[-] Call stack:
[-]   /root/msf/lib/rbmysql/protocol.rb:191:in `initialize'
[-]   /root/msf/lib/rbmysql/protocol.rb:191:in `new'
[-]   /root/msf/lib/rbmysql/protocol.rb:191:in `initialize'
[-]   /usr/lib/ruby/1.8/timeout.rb:48:in `timeout'
[-]   /root/msf/lib/rbmysql/protocol.rb:188:in `initialize'
[-]   /root/msf/lib/rbmysql.rb:148:in `new'
[-]   /root/msf/lib/rbmysql.rb:148:in `connect'
[-]   /root/msf/lib/rbmysql.rb:88:in `connect'
[-]   /root/msf/lib/msf/core/exploit/mysql.rb:42:in `mysql_login'
[-]   /root/msf/lib/msf/core/exploit/mysql.rb:58:in `mysql_login_datastore'
[-]   (eval):39:in `run'
[*] Auxiliary module execution completed
msf auxiliary(mysql_sql) > back
msf > use auxiliary/admin/mysql/mysql_enum
msf auxiliary(mysql_enum) > show options

Module options:

   Name        Current Setting  Required  Description
   ----        ---------------  --------  -----------
MYSQL_PASS Cothiew1 no The password for the specified username
   MYSQL_USER  root             yes       The username to authenticate as
   RHOST       localhost        yes       The target address
   RPORT       3306             yes       The target port

msf auxiliary(mysql_enum) > run

[-] Auxiliary failed: TypeError can't convert Socket into String
[-] Call stack:
[-]   /root/msf/lib/rbmysql/protocol.rb:191:in `initialize'
[-]   /root/msf/lib/rbmysql/protocol.rb:191:in `new'
[-]   /root/msf/lib/rbmysql/protocol.rb:191:in `initialize'
[-]   /usr/lib/ruby/1.8/timeout.rb:48:in `timeout'
[-]   /root/msf/lib/rbmysql/protocol.rb:188:in `initialize'
[-]   /root/msf/lib/rbmysql.rb:148:in `new'
[-]   /root/msf/lib/rbmysql.rb:148:in `connect'
[-]   /root/msf/lib/rbmysql.rb:88:in `connect'
[-]   /root/msf/lib/msf/core/exploit/mysql.rb:42:in `mysql_login'
[-]   /root/msf/lib/msf/core/exploit/mysql.rb:58:in `mysql_login_datastore'
[-]   (eval):39:in `run'
[*] Auxiliary module execution completed
msf auxiliary(mysql_enum) >
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


Current thread: