Sqlmap Veritabanı Kullanıcısı Şifre Kırma / Pentester

[..]
enumeration.add_option("--passwords", dest="getPasswordHashes", [..])
enumeration.add_option("--privileges", dest="getPrivileges", [..])
enumeration.add_option("--roles", dest="getRoles", [..])
enumeration.add_option("--current-user", dest="getCurrentUser", [..])
[..]

class Enumeration(GenericEnumeration):
    def __init__(self):
        GenericEnumeration.__init__(self)
[..]

from plugins.generic.enumeration import Enumeration as GenericEnumeration

class Enumeration([..], Users):
    def __init__ (self):
        [..]
        Users.__init__(self)
[..]

from plugins.generic.users import Users

if conf.user == "CU":
    infoMsg += " for current user"
    conf.user = self.getCurrentUser()

class Users (object):
    """
    This class defines users' enumeration functionalities for plugins.
    """
    def __init__ (self):
        [..]
        kb.data.currentUser = ""

    def getCurrentUser(self):
        [..]

def getCurrentUser(self):
    [..]
    query = queries[Backend.getIdentifiedDbms()].current_user.query
    if not kb.data.currentUser:
        kb.data.currentUser = unArrayizeValue(inject.getValue(query))
    return kb.data.currentUser

queries[Backend.getIdentifiedDbms()].current_user.query

def _loadQueries():
    """
    Loads queries from 'xml/queries.xml' file.
    """
    pass

<current_user query="CURRENT_USER()"/>

<users>
    <inband query="SELECT grantee FROM INFORMATION_SCHEMA.USER_PRIVILEGES" query2="[..]"/>
    [..]
</users>

<passwords>
    <inband query="SELECT user,password FROM mysql.user" condition="user"/>
    [..]
</passwords>

<privileges>
    <inband query="SELECT grantee,privilege_type FROM INFORMATION_SCHEMA.USER_PRIVILEGES" condition="grantee" query2="[..]" condition2="user"/>
</privileges>

mysql> SELECT grantee FROM INFORMATION_SCHEMA.USER_PRIVILEGES;
> grantee
'root'@'localhost'
[..]
57 rows in set (0.00 sec)

mysql> SELECT user,authentication_string FROM mysql.user
> user:authentication_string
'root' - '<HASH>'
[..]
3 rows in set (0.00 sec)