> For the complete documentation index, see [llms.txt](https://pentesting.mrw0l05zyn.cl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentesting.mrw0l05zyn.cl/escaneo-y-enumeracion/servicios/3306-tcp-mysql.md).

# 3306/TCP (MySQL)

## Banner grabbing <a href="#banner-grabbing" id="banner-grabbing"></a>

```sh
nc -vn <target> 3306
```

## Vulnerabilidades <a href="#vulnerabilidades" id="vulnerabilidades"></a>

### Nmap <a href="#nmap" id="nmap"></a>

```sh
nmap -p 3306 --script=vuln <target>
```

## Conexión

```shell
mysql -u <user> -h <target> -p
mysql --user=<user> --password=<password> --host=<target>
mysql --user=<user> --password=<password> --host=127.0.0.1 --port=<port>
mysql --user=<user> --password=<password> --host=<target> -e "<query>"
```

## Información general

```shell
# Versión
select version();

# Usuarios
select user();

# Bases de datos
show databases;

# Tablas
use <database>;
show tables;
describe <table>;
```

## Usuarios

```sql
SELECT user, host, authentication_string FROM mysql.user;
SELECT concat_ws(':', user, authentication_string) FROM mysql.user;
```