Merge pull request #14754 from lu4nx/change-wordlist

Change MySQL wordlists to helpers/wordlists/mysql*.txt
2026-01-24 12:33:22 +08:00 · 2026-01-12 17:10:10 +05:30
parent 25040d3355 3fb8041aa5
commit 26ac188e51
3 changed files with 8 additions and 14 deletions
--- a/helpers/wordlists/mysql-passwords.txt
+++ b/helpers/wordlists/mysql-passwords.txt
@@ -16,4 +16,5 @@ eLaStIx.asteriskuser.2oo7
 raspberry
 openauditrootuserpassword
 vagrant
-123qweASD#
+123qweASD#
+test
--- a/helpers/wordlists/mysql-users.txt
+++ b/helpers/wordlists/mysql-users.txt
@@ -4,4 +4,6 @@ cloudera
 moves
 mcUser
 dbuser
-asteriskuser
+asteriskuser
+mysql
+test
--- a/javascript/default-logins/mysql-default-login.yaml
+++ b/javascript/default-logins/mysql-default-login.yaml
@@ -27,17 +27,8 @@ javascript:
      Pass: "{{passwords}}"

    payloads:
-      usernames:
-        - root
-        - admin
-        - mysql
-        - test
-      passwords:
-        - root
-        - admin
-        - mysql
-        - test
-        -
+      usernames: helpers/wordlists/mysql-users.txt
+      passwords: helpers/wordlists/mysql-passwords.txt
    attack: clusterbomb

    matchers:
@@ -46,4 +37,4 @@ javascript:
          - "response == true"
          - "success == true"
        condition: and
-# digest: 4a0a0047304502202e60c03105cba531fe84fd491ad25fc7cc97070adc3a43865bad78e1ba274f7d022100f26af1d4d6e117ac8cbe021961ba09bf1c3c29c18ee17d8e4d378d0ac634fd24:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202e60c03105cba531fe84fd491ad25fc7cc97070adc3a43865bad78e1ba274f7d022100f26af1d4d6e117ac8cbe021961ba09bf1c3c29c18ee17d8e4d378d0ac634fd24:922c64590222798bb761d5b6d8e72950