Nmap mysql-empty-password NSE Script

Script Overview

---

Script source code: https://github.com/nmap/nmap/tree/master/scripts/mysql-empty-password.nse
Script categories: intrusive, auth
Target service / protocol: mysql
Target network port(s): 3306
List of CVEs: -

Script Description

---

The mysql-empty-password.nse script checks for MySQL servers with an empty password for root or anonymous.

Mysql-empty-password NSE Script Arguments

---

The mysql-empty-password.nse script does not have any arguments.

Mysql-empty-password NSE Script Example Usage

---

Here's an example of how to use the mysql-empty-password.nse script:

nmap --script=mysql-empty-password <target>

Mysql-empty-password NSE Script Example Output

---

Here's a sample output from the mysql-empty-password.nse script:

3306/tcp open  mysql
| mysql-empty-password:
|   anonymous account has empty password
|_  root account has empty password

Mysql-empty-password NSE Script Example XML Output

---

There is no sample XML output for this module. However, by providing the -oX <file> option, Nmap will produce a XML output and save it in the file.xml file.

Author

---

• Patrik Karlsson

References

---

• https://nmap.org/nsedoc/scripts/mysql-empty-password.html
• https://github.com/nmap/nmap/tree/master/scripts/mysql-empty-password.nse

See Also

---

Related NSE scripts to the mysql-empty-password.nse script:

• mysql-audit.nse
• mysql-brute.nse
• mysql-databases.nse
• mysql-dump-hashes.nse
• mysql-enum.nse
• mysql-info.nse
• mysql-query.nse
• mysql-users.nse
• mysql-variables.nse
• mysql-vuln-cve2012-2122.nse

Visit Nmap NSE Library for more scripts.

The mysql-empty-password.nse script may fail with the following error messages. Check for the possible causes by using the code snippets highlighted below found in the script source code. This can often times help in identifying the root cause of the problem.

Failed to connect to mysql server

---

Here is a relevant code snippet related to the "Failed to connect to mysql server" error message:

40:	  -- set a reasonable timeout value
41:	  socket:set_timeout(5000)
42:	
43:	  for _, v in ipairs( users ) do
44:	    local status, response = socket:connect(host, port)
45:	    if( not(status) ) then return stdnse.format_output(false, "Failed to connect to mysql server") end
46:	
47:	    status, response = mysql.receiveGreeting( socket )
48:	    if ( not(status) ) then
49:	      stdnse.debug3("%s", SCRIPT_NAME)
50:	      socket:close()