search

Atticuss / SQLViking

sniff/log database traffic or actively execute arbitrary queries via TCP injection
43 stars 8 forks source link

mysql_old_password #15

Open Atticuss opened 9 years ago

Atticuss commented 9 years ago

look into the feasability of using tcp injection during mysql connection phase to instructs clients to use mysql_old_password auth protocol. would allow for easy stealing of passwords due to weak hashes.

Atticuss commented 9 years ago

http://askubuntu.com/questions/56084/installing-old-mysql-server-4-1-on-ubuntu-11-04

Link on installing mysql 4.1 (5+ does not support mysql_old_password)