metasploit 连接mysql

require 'msf/core'

class MetasploitModule < Msf::Exploit::Remote
  Rank = NormalRanking

  include Msf::Exploit::Remote::MySQL

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'MySQL Yassl Hello',
      'Description'    => %q{
        This module exploits a vulnerability in MySQL's Yassl library.
      },
      'Author'         => ['Your Name'],
      'License'        => MSF_LICENSE,
      'References'     =>
        [
          ['CVE', '2019-6339'],
        ],
      'Privileged'     => true,
      'Payload'        =>
        {
          'Space'    => 1024,
          'BadChars' => "\x00",
        },
      'Platform'       => ['linux'],
      'Targets'        =>
        [
          ['MySQL 5.7', {}],
        ],
      'DefaultTarget'  => 0,
      'DisclosureDate' => 'Aug 13 2019'))

    register_options(
      [
        Opt::RPORT(3306),
        OptString.new('USERNAME', [ true, 'The username to authenticate with', 'root' ]),
        OptString.new('PASSWORD', [ true, 'The password to authenticate with', 'password' ]),
      ])
  end

  def exploit
    connect

    if mysql_login(username: datastore['USERNAME'], password: datastore['PASSWORD'])
      print_good("Connected to MySQL database")
      mysql_close
    else
      print_error("Failed to connect to MySQL database")
    end
  end
end