CVE-2012-5615

This exploit leverages a post-authentication UDF (User Defined Function) technique to achieve remote code execution on MySQL Windows systems, resulting in a SYSTEM-level reverse shell. It requires compiling a custom payload DLL and the exploit binary, then executing it with valid MySQL credentials.

This script enumerates MySQL user accounts by exploiting a timing difference in authentication responses between MySQL 4.x and 5.x servers. It uses a wordlist to test usernames and identifies valid accounts based on the server's error message.