{"id":451,"date":"2012-03-06T09:28:53","date_gmt":"2012-03-06T08:28:53","guid":{"rendered":"https:\/\/www.phillips321.co.uk\/?p=451"},"modified":"2012-03-06T09:51:54","modified_gmt":"2012-03-06T08:51:54","slug":"mysql-cheat-sheet","status":"publish","type":"post","link":"https:\/\/www.phillips321.co.uk\/2012\/03\/06\/mysql-cheat-sheet\/","title":{"rendered":"MySQL Cheat Sheet"},"content":{"rendered":"

I often find that when I get access to a DB I dont know how to control it, I always end up typing in the wrong commands or having to quickly google what i want to do. Thus, I thought it would make sense to write up a quick cheat sheet, especially when sometimes with SQLi you need to be as careful with your commands as possible.
\nThis write up will be in the prespective of a dirtect connection to the DB.
\nTo login from a linux terminal (use -h only if connecting to a remote box)<\/p>\n

1
<\/div><\/td>
#<\/span>mysql -h<\/span> 10.0.0.2 -u<\/span> root -p<\/span><\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

View Databases and Table info\/data<\/strong>
\nTo create a new db on the server<\/p>\n

1
<\/div><\/td>
mysql><\/span> create database [<\/span>db name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Show databases<\/p>\n

1
<\/div><\/td>
mysql><\/span> show databases;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

To delete a db on the server<\/p>\n

1
<\/div><\/td>
mysql><\/span> drop [<\/span>db name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Connect to a database<\/p>\n

1
<\/div><\/td>
mysql><\/span> use [<\/span>db name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

List the tables in a db<\/p>\n

1
<\/div><\/td>
mysql><\/span> show tables;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

To delete a table<\/p>\n

1
<\/div><\/td>
mysql><\/span> drop table [<\/span>table name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Show info about table field formats<\/p>\n

1
<\/div><\/td>
mysql><\/span> describe [<\/span>table name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Show columns and column info<\/p>\n

1
<\/div><\/td>
mysql><\/span> show colums from [<\/span>table name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Output all data from the table<\/p>\n

1
<\/div><\/td>
mysql><\/span> SELECT *<\/span> FROM [<\/span>table name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Show only rows with the value “searchstring”<\/p>\n

1
<\/div><\/td>
mysql><\/span> SELECT *<\/span> FROM [<\/span>table name]<\/span> WHERE [<\/span>field name]<\/span> = "searchstring"<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Show all rows that contain both username “admin” and dayslocked ‘0’;<\/p>\n

1
<\/div><\/td>
mysql><\/span> SELECT *<\/span> FROM [<\/span>table name]<\/span> WHERE username = "admin"<\/span> AND dayslocked = '0'<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Show all rows that contain both username like “admin” and dayslocked ‘0’;<\/p>\n

1
<\/div><\/td>
mysql><\/span> SELECT *<\/span> FROM [<\/span>table name]<\/span> WHERE username = "admin%"<\/span> AND dayslocked = '0'<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Show all rows that contain both username not “admin” and locked ‘1’<\/p>\n

1
<\/div><\/td>
mysql><\/span> SELECT *<\/span> FROM [<\/span>table name]<\/span> WHERE username !<\/span>= "admin"<\/span> AND locked = '1'<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Show only rows with the value “searchstring” but only showing records 1-10<\/p>\n

1
<\/div><\/td>
mysql><\/span> SELECT *<\/span> FROM [<\/span>table name]<\/span> WHERE [<\/span>field name]<\/span> = "searchstring"<\/span> limit 1<\/span>,10<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Count number of rows<\/p>\n

1
<\/div><\/td>
mysql><\/span> SELECT COUNT(<\/span>*<\/span>)<\/span> FROM [<\/span>table name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Count number of columns<\/p>\n

1
<\/div><\/td>
mysql><\/span> SELECT SUM(<\/span>*<\/span>)<\/span> FROM [<\/span>table name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Modify data in tables<\/strong>
\nCreate a table<\/p>\n

1
<\/div><\/td>
mysql><\/span> create table [<\/span>table name]<\/span> (<\/span>personid int(<\/span>50<\/span>)<\/span> not null auto_increment primary key,fname varchar(<\/span>35<\/span>)<\/span>,mname varchar(<\/span>50<\/span>)<\/span>,lname varchar(<\/span>50<\/span>)<\/span> default 'blank'<\/span>)<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

New row in a table<\/p>\n

1
<\/div><\/td>
mysql><\/span> INSERT INTO db (<\/span>Host,Db,username,locked,dayslocked)<\/span> VALUES (<\/span>'%'<\/span>,'databasename'<\/span>,'pentest'<\/span>,'0'<\/span>,'0'<\/span>)<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Modify data in a table<\/p>\n

1
<\/div><\/td>
mysql><\/span> UPDATE [<\/span>table name]<\/span> SET locked = '0'<\/span> where [<\/span>field name]<\/span> = 'pentest'<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Delete a row from a table<\/p>\n

1
<\/div><\/td>
mysql><\/span> DELETE from [<\/span>table name]<\/span> where [<\/span>field name]<\/span> = 'searchstring'<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Delete a column from a table<\/p>\n

1
<\/div><\/td>
mysql><\/span> alter table [<\/span>table name]<\/span> drop column [<\/span>column name]<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Change column name<\/p>\n

1
<\/div><\/td>
mysql><\/span> alter table [<\/span>table name]<\/span> change [<\/span>oldcolumnname]<\/span> [<\/span>newcolumnname]<\/span> varchar (<\/span>25<\/span>)<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Make a column bigger<\/p>\n

1
<\/div><\/td>
mysql><\/span> alter table [<\/span>table name]<\/span> modify [<\/span>columnname]<\/span> VARCHAR(<\/span>30<\/span>)<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Make a unique column so you get no duplicates<\/p>\n

1
<\/div><\/td>
mysql><\/span> alter table [<\/span>table name]<\/span> add unique (<\/span>[<\/span>columnname]<\/span>)<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

backup and Restoring data<\/strong>
\nLoad CSV into a table<\/p>\n

1
<\/div><\/td>
mysql><\/span> LOAD DATA INFILE '\/root\/backup.csv'<\/span> replace INTO TABLE [<\/span>table name]<\/span> FIELDS TERMINATED BY ','<\/span> LINES TERMINATED BY '\\n'<\/span> (<\/span>field1,field2,field3)<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Dump all databases and data into a backup sql file (contains sql commands to recreate all dbs)<\/p>\n

1
<\/div><\/td>
#<\/span>mysqldump -u<\/span> root -pmysecret<\/span> --opt<\/span> ><\/span> \/<\/span>root\/<\/span>backup.sql<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Dump a single database for backup<\/p>\n

1
<\/div><\/td>
#<\/span>mysqldump -u<\/span> root -pmysecret<\/span> --databases<\/span> [<\/span>db name]<\/span> ><\/span> \/<\/span>root\/<\/span>dbname_backup.sql<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Dump a single table for backup<\/p>\n

1
<\/div><\/td>
#<\/span>mysqldump -c<\/span> -u<\/span> root -pmysecret<\/span> [<\/span>db name]<\/span> [<\/span>table name]<\/span> ><\/span> \/<\/span>root\/<\/span>dbnamee.tablename.sql<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Restore from the backup<\/p>\n

1
<\/div><\/td>
#<\/span>mysql -u<\/span> root -pmysecret<\/span> [<\/span>db name]<\/span> <<\/span> \/<\/span>root\/<\/span>dbname_backup.sql<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

User info<\/strong>
\nCreate a new user (switch to mysql db, make user, then giv privs)<\/p>\n

1
2
3
<\/div><\/td>
mysql><\/span> use mysql;
\nmysql><\/span> INSERT INTO user (<\/span>Host,User,Password)<\/span> VALUES (<\/span>'%'<\/span>,'pentest'<\/span>,PASSWORD(<\/span>'mysecret'<\/span>)<\/span>)<\/span>;
\nmysql><\/span> flush privileges;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Change user password, both from linux terminal and mysql prompt<\/p>\n

1
2
<\/div><\/td>
#mysqladmin -u pentest -h 10.0.0.2 -p password 'mysecret2'<\/span>
\nmysql><\/span> SET PASSWORD FOR 'pentest'<\/span>@<\/span>'10.0.0.2'<\/span> = PASSWORD(<\/span>'mysecret2'<\/span>)<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Create a password for user if there is not one currently set (warning as password will be stored in bash history!)<\/p>\n

1
<\/div><\/td>
#<\/span>mysqladmin -u<\/span> root password mysecret<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Update a password<\/p>\n

1
<\/div><\/td>
#<\/span>mysqladmin -u<\/span> root -p<\/span> oldsecret newsecret<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Allow new user to connect to db with privs for a table(do this as root user)<\/p>\n

1
2
3
4
<\/div><\/td>
mysql><\/span> use mysql;
\nmysql><\/span> grant usage on *<\/span>.*<\/span> to pentest@<\/span>localhost identified by 'mysecret'<\/span>;
\nmysql><\/span> INSERT INTO db (<\/span>Host,Db,User,Select_priv,Insert_priv,Update_priv,Delete_priv,Create_priv,Drop_priv)<\/span> VALUES (<\/span>'%'<\/span>,'db name'<\/span>,'pentest'<\/span>,'Y'<\/span>,'Y'<\/span>,'Y'<\/span>,'Y'<\/span>,'Y'<\/span>,'N'<\/span>)<\/span>;
\nmysql><\/span> flush privileges<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Or just grant the user access to everything<\/p>\n

1
2
<\/div><\/td>
mysql><\/span> grant all privileges on databasename.*<\/span> to pentest@<\/span>localhost;
\nmysql><\/span> flush privileges;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

To update data alreasy in a table<\/p>\n

1
<\/div><\/td>
mysql><\/span> UPDATE [<\/span>table name]<\/span> SET Select_priv = 'Y'<\/span>,Insert_priv = 'Y'<\/span>,Update_priv = 'Y'<\/span> where [<\/span>field name]<\/span> = 'pentest'<\/span>;<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Thanks to pantz.org<\/a> for the pointers.<\/p>\n","protected":false},"excerpt":{"rendered":"

I often find that when I get access to a DB I dont know how to control it, I always end up typing in the wrong commands or having to quickly google what i want to do. Thus, I thought it would make sense to write up a quick cheat sheet, especially when sometimes with […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[8,3],"tags":[142,172,171,165,170,169,168,166,167,173],"_links":{"self":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/451"}],"collection":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/comments?post=451"}],"version-history":[{"count":8,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/451\/revisions"}],"predecessor-version":[{"id":460,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/451\/revisions\/460"}],"wp:attachment":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/media?parent=451"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/categories?post=451"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/tags?post=451"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}