Add Proxies support to creating a session with mysql_login

[sjanusz-r7]

This PR adds in proxy support for getting a mysql session using mysql_login.

Before

msf6 auxiliary(scanner/mysql/mysql_login) > run proxies=socks5:192.168.112.1:1080 rhost=172.17.0.2 rport=3306 stop_on_success=true CreateSession=true username=root password=password verbose=true

[+] 172.17.0.2:3306       - 172.17.0.2:3306 - Found remote MySQL version 8.3.0
[-] 172.17.0.2:3306       - 172.17.0.2:3306 - LOGIN FAILED: root:password (Unable to Connect: connection timeout)
[-] 172.17.0.2:3306       - 172.17.0.2:3306 - LOGIN FAILED: root: (Unable to Connect: connection timeout)
[*] 172.17.0.2:3306       - Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed

After

msf6 auxiliary(scanner/mysql/mysql_login) > run proxies=socks5:192.168.112.1:1080 rhost=172.17.0.2 rport=3306 stop_on_success=true CreateSession=true username=root password=password verbose=true

[+] 172.17.0.2:3306       - 172.17.0.2:3306 - Found remote MySQL version 8.3.0
[+] 172.17.0.2:3306       - 172.17.0.2:3306 - Success: 'root:password'
[*] MySQL session 1 opened (192.168.112.1:54174 -> 192.168.112.1:1080) at 2024-02-17 03:10:05 +0000
[*] 172.17.0.2:3306       - Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf6 auxiliary(scanner/mysql/mysql_login) > sessions -i -1
[*] Starting interaction with 1...

MySQL @ 192.168.112.1:1080 () > query 'select version()'
[*] Sending statement: 'select version()'...
Query Result
============

    #  version()
    -  ---------
    0  8.3.0

Wireshark

The above screenshot shows the initial session setup using the proxy. No internal Docker IP is ever exposed as the host has no access to the Ubuntu VM Docker IP range.

The above Wireshark capture shows the result of running query 'select version()' on the session.

Verification

You might want to ensure that on your host, you have no Docker containers running so that false positives with the same IP on the host and VM are avoided.

• Start msfconsole on your host
• Have Docker installed on your Ubuntu VM
• Set up a MySQL container
• Get a meterpreter x64 session on your Ubuntu VM
• in the Framework Console, do route add to add the internal Docker IP from Ubuntu to the routing table (you may be able to call route add 172.17.0.1/24 -1)
• Set up a socks proxy on the first instance using use socks_proxy
• Run a second framework instance on your host
• use mysql_login
• pass in the proxies= option pointing to your IP and port used by the socks_proxy
• run proxies=socks5:your_ip:1080 rhost=ubuntu_vm_internal_docker_ip rport=3306 stop_on_success=true CreateSession=true username=root password=whatever_password_you_picked verbose=true

[cgranleese-r7]

Before

After

[cgranleese-r7]

Looks good to me 👍

[cgranleese-r7]

Release Notes

This PR adds proxy support for getting a MySQL session via the mysql_login module.