Cracking a database

01/19/2009 20:20 revolution263#1
Can someone tell me a few steps that I can try to use to get into someones private server database? The owner of the server is making it unfair for other players by giving lvls, gears, pets, etc to certain players. I want to get in make myself pm, and get items, then attacking every mother fucker that killed me cuz the owner. haha
Only thing I have so far is the Ip address. I tried a few things like
User name: root, test
Password: root, test
I know its possible because back when I had my server I had a very complicated password, and user name, yet someone still got in.
01/27/2009 13:41 delinquent#2
If the server has a site with admin login, you can try SQL inject it.
If not, i don't think it's easy to crack a SQL database encrypted with MD5 or SHA-1
01/27/2009 14:46 picadilly#3
First of all try out port scan to see if database is actually acessible. If I'd run server I'd put database on localhost, acessible via pipes, not network + put names server and router in demilitarized zone, not actual server, but who knows - there is not so many ppl knowing at least something about server security.

Port scan would also reveal you some possible vulnerabilities of the target machine - like other services running etc. And from open ports you can also guess what operating system is running there.

I would also advice to run port scan from internet cafe, not your home :)