导航

Nmap扫出Mysql的Salt,有木有用?

#1
最近在复习工具的使用,在使用 -A参数时,对于3306服务给出的结果如下
3306/tcp  open   mysql    MySQL 5.6.49-cll-lve
| mysql-info:
|   Protocol: 10
|   Version: 5.6.49-cll-lve
|   Thread ID: 193519
|   Capabilities flags: 63487
|   Some Capabilities: LongPassword, Support41Auth, FoundRows, IgnoreSigpipes, L
ongColumnFlag, DontAllowDatabaseTableColumn, SupportsTransactions, Speaks41Proto
colOld, InteractiveClient, Speaks41ProtocolNew, SupportsCompression, SupportsLoa
dDataLocal, ODBCClient, IgnoreSpaceBeforeParenthesis, ConnectWithDatabase, Suppo
rtsAuthPlugins, SupportsMultipleResults, SupportsMultipleStatments
|   Status: Autocommit
|   Salt: M_sGEeO<}#2o\_H*9"9<
|_  Auth Plugin Name: mysql_native_password
敢问各位兄弟,这里的Salt: M_sGEeO<}#2o\_H*9"9< 有没有啥用?

  大概搜了下资料,对这个表述比较少。想着不是啥大问题,就发水区吧,要是影响兄弟们闲情逸致,见谅见谅哈!
V:xss_sqlmap&nbsp;Q:1704292887
欢迎交流,请备注来源!
2020-09-26
#2