Mysql password file and ciphertext

   when we gain control of a server, we tend to look for sensitive files, such as password files, database configuration files, and so on. If the database is a mysql server, then we can use the search command to search for user.MYD files, linux can use locate and find,windows can use where and find, the specific usage is not detailed here!

Official version installation

If    is a mysql database installed through official software, the ciphertext of the password can be seen at a glance, as shown below:

Copy the ciphertext on the cmd5 and you will have a certain chance to decrypt the plaintext! As shown below:

Third-party software installation

If    is a mysql database installed through third-party software, such as phpstudy,jspstudy, the ciphertext needs to be spliced before it can be decrypted normally, as shown below: