Twitter: @webpwnized
Thank you for watching. Please help me ! Vote, subscribe or even support this channel at https://www.youtube.com/user/webpwnized (Click Support).
With access to the MySQL server, the MySQL root (administrator) password can be reset. The MySQL administrative user (aka root) stores its password hash in the mysql.user table (as all MySQL users do). By starting the MySQL server with the ignore grants option and using SQL queries to overwrite the MySQL root/admin password hash, the MySQL root/admin/admin password can be changed to any value .
The MySQL instance shown in the video is installed on Ubuntu Linux but the technique works on any Linux or Windows system because the technique interacts with the MySQL server itself. Windows or Linux operating system is not important.
MySQL Server does not store passwords, but does store password hashes. When the user enters a password, the system hashes the password and then compares the calculated password hash with the password hash stored in the MySQL users table. If the two password hashes match, the system authenticates the user. The root/admin user has more privileges than other users
The YouTube Web channel is dedicated to information security, security testing and ethical hacking. The focus is on web application security, but many other topics are covered. Some of them include forensics, network security, security testing tools, and security testing processes. The channel features videos to encourage software developers and system administrators to perform security testing. Additionally, the channel trains the next generation of security testers and bug bounty hunters who want to respectfully, legally, and ethically help owners of systems enabling security testing.
Please take the opportunity to connect and share this video with your friends and family if you find it useful.
No Comments