How To: Reset Linux MySQL Root user password - NetSecNow Kali Linux 2.0 

indeed

Yes very soon :-)

We have a video on sql injection

Yes. Time is key. I'm hoping to make some more when work slows down.

Not sure if this will help deduce whats wrong but, when I enter localhost/dvwa/ into my search bar I get the following... System error - config file not found. Copy config/config.inc.php.dist to config/config.inc.php and configure to your environment. When I go to my dvwa directory and go to the config directory my file is... config.inc.php.dist Seems like dvwa is telling me to change that to `config.inc.php`, then configure my env but I'm hesitant to just start doing that without knowing the consequences.

Hey John, Can you type in service mysql start and then service mysql status?

Yeah so I'm able to start mysql with `service mysql start` then check the status and see it is running. I realized I hadn't copied the config file correctly, I got that working and was able to view the setup page. But now I am stuck on setting up the dvwa database. When i select create/reset database it says "Could not connect to the MySQL service. Please check the config file." There are three main issues I believe I have 1. PHP function allow_url_include: Disabled, so here it seems like I have to somewhow have allow_url_include=on but I cant find it in my sytem, just not sure on the path to edit the allow_url_include 2. PHP module gd: Missing, not sure what this means 3. reCAPTCHA key: Missing, then there is this as well 4. [User: root] Writable folder /var/www/html/dvwa/hackable/uploads/: No [User: root] Writable file /var/www/html/dvwa/external/phpids/0.6/lib/IDS/tmp/phpids_log.txt: No Then I Get this as well, quite a few errors I have to iron out, any help at all would be tremendously appreciated

In regards to the first issue; I am currently searching through /etc/php/7.0 to find the config file where I Would change the php function on to allow_url_include.

I know this is slightly off the topic of the video but I was initially watching your how to on setting up dvwa and got stuck on the mysql part, then figured that I was just wasnt copying config.inc.php.dist config.inc.php in the config file. So like I said my issue now is resolving all the setup requirements to actually start using dvwa

Faraz, Thank you for the kind feedback! Be sure to check out my blog at learnnetsec.blogspot.com

I have the same error.... Is there any solution for this?

+Czarina Dela Cruz Are you guys root when doing this?

Yes I am

+Czarina Dela Cruz so are you doing service mysql stop then start?

+chris Szy btw dont know if this is allowed sorry.

Were you root when you did it?

Yes im always root

+Giacomo Antonioli what happens when you service start mysql

ql> use mysql Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> update user set password=PASSWORD("KondorMitnick") where user='root'; Query OK, 4 rows affected (0.01 sec) Rows matched: 4 Changed: 4 Warnings: 0 mysql> flush privileges; Query OK, 0 rows affected (0.00 sec) mysql> exit Bye root@kali:~# service mysql restart Job for mysql.service failed because the control process exited with error code. See "systemctl status mysql.service" and "journalctl -xe" for details. root@kali:~# service mysql status ● mysql.service - MySQL Community Server Loaded: loaded (/lib/systemd/system/mysql.service; disabled; vendor preset: enabled) Active: activating (start-post) since Thu 2016-09-08 12:23:22 HST; 33s ago Process: 7919 ExecStartPre=/usr/share/mysql/mysql-systemd-start pre (code=exited, status=0/SUCCESS) Main PID: 7922 (mysqld_safe); : 7923 (mysql-systemd-s) CGroup: /system.slice/mysql.service ├─7922 /bin/sh /usr/bin/mysqld_safe ├─8268 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --... └─control ├─7923 /bin/bash /usr/share/mysql/mysql-systemd-start post └─8375 sleep 1 Sep 08 12:23:22 kali systemd[1]: Starting MySQL Community Server... Sep 08 12:23:23 kali mysqld_safe[7922]: 160908 12:23:23 mysqld_safe Can't lo.... Sep 08 12:23:23 kali mysqld_safe[7922]: 160908 12:23:23 mysqld_safe Logging .... Sep 08 12:23:23 kali mysqld_safe[7922]: 160908 12:23:23 mysqld_safe Starting...l Hint: Some lines were ellipsized, use -l to show in full. root@kali:~# service mysql restart ^C ^C root@kali:~# service mysql status ● mysql.service - MySQL Community Server Loaded: loaded (/lib/systemd/system/mysql.service; disabled; vendor preset: enabled) Active: deactivating (stop-sigterm) Process: 7923 ExecStartPost=/usr/share/mysql/mysql-systemd-start post (code=killed, signal=TERM) Process: 7919 ExecStartPre=/usr/share/mysql/mysql-systemd-start pre (code=exited, status=0/SUCCESS) Main PID: 7922 (mysqld_safe) CGroup: /system.slice/mysql.service ├─7922 /bin/sh /usr/bin/mysqld_safe └─8268 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --... Sep 08 12:23:22 kali systemd[1]: Starting MySQL Community Server... Sep 08 12:23:23 kali mysqld_safe[7922]: 160908 12:23:23 mysqld_safe Can't lo.... Sep 08 12:23:23 kali mysqld_safe[7922]: 160908 12:23:23 mysqld_safe Logging .... Sep 08 12:23:23 kali mysqld_safe[7922]: 160908 12:23:23 mysqld_safe Starting...l Hint: Some lines were ellipsized, use -l to show in full. root@kali:~# service mysql start

+Giacomo Antonioli I'll try an emulate this when I get home later.

don't use quotes inside the parentheses

:-D tee hee

+NetSecNow how to identify cross site scripting from the" http response " if u have any screenshots explain please

Hi. how can I help?

+Bob Gg I wrote a script called tor-buddy to help with this. check it out on my website.

+NetSecNow i just got everything set up man thanks i appreciate it. i have one last question. I know you said that to stop tor-buddy you click ctrl+c but what do you click to start it back up again? same buttons?

+Bob Gg ./tor-buddy.sh to start it :-)

+Bob Gg CD to where ever you extracted it to. then run it.

Make sure that your mysql service is running service mysql start

+Bob Gg Try using the tor buddy script, but set the rfresh rate higher. Sometimes you just pick up a bum proxy that's all

no

Hi. Yes certainly. Work has been crazy lately. I should have some more out in a couple weeks

***** What kind of videos do you have planned? Are you going to make a video on the latest and greatest Kali update? Thank you.

+Scott Smith Yes, the newest update. Some other tools I've been researching, etc.

***** I look forward to seeing them. Thanks for the great videos! :)

I don't know if you follow our blog, but We have officially started our online school with pre-registrations. Check it out at ww.learnnetsec.com

Yes, that is the plan at some point. Hopefully after I move

Yes, that is the plan at some point. Hopefully after I move

Yes, that is the plan at some point. Hopefully after I move

Yes, that is the plan at some point. Hopefully after I move

of course!

+NetSecNow yay!

+SuperCombine CP Hi :-)

+NetSecNow o hai thare :) i hopes you make some moar videos soon. I installed a wordpress virtualbox and was able to mess around with that. I also learned how to use netcat!! Makkin fifos and stuff. :P

+SuperCombine CP Nice!

Crazy! Do you have the latest version of DVWA?

Hey there, you had replied to one of my comments asking if I had the most recent version of DVWA. As of today, yeah I believe so, I went to dvwa homepage and clicked download. I did think it was suspicious then when I went into my teminal that it was in my downloads as "DVWA-master.zip" not like it was in your video which read as"DVWA V1.9" or what have you. I deleted the Kali VM that had the original issues so I'm starting fresh.

I assume I do, I went directly to DVWA.co and downloaded the master zip. WHen I unzipped it it became a directory, "DVWA-master" is that good or bad? I think it is suspicious as it doesnt read as "DVWA v2.4" or whatever it probably should be.

Here are my Kali specs btw Linux kali 4.9.0-kali3-amd64 #1 SMP Debian 4.9.18-1kali1 (2017-04-04) x86_64 GNU/Linux

So I'm still getting the same issue. root@kali:/# mysql -u root Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 2 Server version: 10.1.22-MariaDB- Debian 9.0 Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed MariaDB [mysql]> update user set password=PASSWORD("mynewpassword") where user='root'; Query OK, 1 row affected (0.00 sec) Rows matched: 1 Changed: 1 Warnings: 0 ##So I find it odd that it only reads "Rows matched: 1 Changed: 1 Warnings: 0" unlike yours MariaDB [mysql]> flush privileges; Query OK, 0 rows affected (0.00 sec) MariaDB [mysql]> exit Bye root@kali:/# root@kali:/# service mysql restart root@kali:/# service mysql status ● mysql.service - LSB: Start and stop the mysql database server daemon Loaded: loaded (/etc/init.d/mysql; generated; vendor preset: disabled) Active: active (exited) since Tue 2017-05-16 13:32:15 EDT; 8s ago Docs: man:systemd-sysv-generator(8) Process: 2986 ExecStart=/etc/init.d/mysql start (code=exited, status=0/SUCCESS) May 16 13:32:15 kali systemd[1]: Starting LSB: Start and stop the mysql database server da May 16 13:32:15 kali mysql[2986]: Starting MariaDB database server: mysqld already running May 16 13:32:15 kali systemd[1]: Started LSB: Start and stop the mysql database server dae root@kali:/# root@kali:/# mysql -u root -p Enter password: Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 4 Server version: 10.1.22-MariaDB- Debian 9.0 Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> You can see here that unlike in your video I am not put directly into the "mysql>" prompt, I know that I am using MariaDB so maybe thats why. What's even more perplexing is in my syntax above you can clearly see that I've changed the password to "mynewpassword", despite this when I enter in some random characters, like I entered "Ilovepizza" and it sent me into root@kali:/# mysql -u root -p Enter password: Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 5 Server version: 10.1.22-MariaDB- Debian 9.0 Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> exit Bye Now I honestly was never prompted anytime in the setup of Kali to enter a username or password for mysql. Maybe I missed something in the setup? I know there is a domain prompt and another type of prompt related to the possible issue but it never asked me, "Set up a mysql username and password" while doing the boot up for Kali. I mentioned that I started on a new Kali VM so this was the first thing I after starting up Kali again. I DL DVWA then immediately went in to change the password using your video.

?

+Hussne Mubarak Thats actually not true. it's been roughly 2 months, and I've been working on some projects

K..

I saw it. But like I say in most of my videos, I'm not able to help people break into their lost accounts. It's against the law.

+NetSecNow Ok i see but then do you know anyone that can help ?? please let me know if u know anyone ;)