Mysql Hacktricks Verified [updated] -

MySQL Hacktricks Verified

MySQL stores credentials in mysql.user . Hash types: mysql_native_password (SHA1-based) or caching_sha2_password (MySQL 8+).

Trigger based RCE (if log_bin is on and you can write to binlog dir):

If you have the FILE privilege, you can drop a web shell into the server's web directory. mysql hacktricks verified