Loading ...I want to highlight the importance of reviewing mysql’s initial set of accounts. Say you have a mysql on abc.def.ghi.jkl running on port 3306 anonymous account with privileges without a password, then: 1. mysql (if issued on localhost) 2. mysql -h abc.def.ghi.jkl 3. mysql -u ” -h abc.def.ghi.jkl 4. mysql -u ” -h abc.def.ghi.jkl -P [...]
Archive for the ‘Beginner’ Category
MySQL anonymous accounts – User=”, Host=’%’ – CODE RED
Posted: 5th October 2009 by Darren Cassar in Beginner, MySQLTags: %, accounts, anonymous, authentication, security, threat, usernames
0
MySQL related bookmark collection
Posted: 17th September 2009 by Darren Cassar in Beginner, Databases, MySQLTags: administration, benchmarking, bookmarks, cluster, collection, configuration, general knowledge, ha, Information, innodb, monitoring, MySQL, performance analysis, security, slow queries
I am publishing my MySQL related bookmark collection http://www.mysqlpreacher.com/bookmarks/. Feel free to send me links you think might be good to add in order to help others. Remember, SHARING IS CARING!!! …. we get so much for free, why shouldn’t we give some back? Cheers, Darren
Securich – 0.1.4
Posted: 10th August 2009 by Darren Cassar in Beginner, MySQLTags: administration, grant, group, groups, password complexity, password expiry, revoke, role, roles, securich, security, user, users
New Securich release – 0.1.4
* Added Password complexity
* Enhanced `set_password` – Old password is now necessary to replace it by a new one
* Enhanced Revoke privileges to accept regexp
* Added Block user@hostname on a database level
* Added Creation of reserved usernames
MySQL processlist – (show/kill processes)
Posted: 3rd July 2009 by Darren Cassar in Beginner, Databases, MySQLTags: kill, mysql stored procedure, processes, processlist, sp, stored proc, stored procedure
It”s not the most common task in the world, but you might want to view processes from a particular user and once in a while you might even need to kill processes from a single user, be it during an attack or because you simply got a bug in an application bombarding your db server with connections!