MySQL password file and redaction

When we gain control of a server, we tend to look for sensitive files such as password files, database configuration files, and so on. If the database is a MySQL server, then we can use the search command to search for user. myd files, Linux can use locate and find,windows can use where and find, the specific use here an unknown solution!

Official version Installation

If the MySQL database is installed through the official software, then the cipher ciphertext can be seen at a glance, such as:

Copy ciphertext in the CMD5 above can have a certain chance to decrypt the clear text! Such as:

Third-party software Installation

If the MySQL database is installed through third-party software, such as Phpstudy,jspstudy, the cipher will need to be spliced to perform the normal decryption, as shown in:

MySQL password file and redaction