Re: mysql-brute using brute library

[Patrik Karlsson <patrik () cqure net>]

On Fri, May 25, 2012 at 8:33 PM, Aleksandar Nikolic
<nikolic.alek () gmail com>wrote:

> Hi All,
>
> I rewrote the mysql-brute script to use brute library.
> I've commited it to trunk as per David's suggestion.
>
> Here is the sample output with timing:
>
> PORT     STATE SERVICE
> 3306/tcp open  mysql
> | mysql-brute:
> |   Accounts
> |     No valid accounts found
> |   Statistics
> |_    Performed 2290 guesses in 600 seconds, average tps: 4
>
> Nmap done: 1 IP address (1 host up) scanned in 602.52 seconds
>
> And here is the output of the old script:
>
> PORT     STATE SERVICE
> 3306/tcp open  mysql
>
> Nmap done: 1 IP address (1 host up) scanned in 605.47 seconds
>
> No noticeable increase in speed I'm afraid.
> I've tested it agains my own server without default passwords on purpose.
>
> Any suggestions?
>
> Thanks,
> Aleksandar
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/

Hmm, what version are you running against? I'm running against 5.1.62 in
Ubuntu and get:

   Statistics
|_    Performed 1940 guesses in 2 seconds, average tps: 970.00


//Patrik

-- 
Patrik Karlsson
http://www.cqure.net
http://twitter.com/nevdull77
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/