Detecting insecure configurations in MySQL servers
Insecure configurations in databases could be abused by attackers. The Center for Internet Security (CIS) publishes a security benchmark for MySQL, and Nmap can use this benchmark as a base to audit the security configurations of MySQL servers.
This recipe shows how to detect insecure configurations in MySQL servers with Nmap.
How to do it...
To detect insecure configurations in MySQL servers, enter the following command:
$ nmap -p3306 --script mysql-audit --script-args 'mysql- audit.username="<username>",mysql-audit.password="<password>",mysql- audit.filename=/usr/local/share/nmap/nselib/data/mysql-cis.audit' <target>
Each security control of the CIS benchmark will be reviewed and a legend of PASS, FAIL, or REVIEW will be included in the results, as follows:
PORT STATE SERVICE 3306/tcp open mysql | mysql-audit: | CIS MySQL...
