# fnmsd/MySQL_Fake_Server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

Repository: https://github.com/fnmsd/MySQL_Fake_Server
Canonical: https://ross.abutalabs.com/products/mysql_fake_server
Language: Python
License Family: other
Topics: security-tools
Last push: 2021-11-18T12:56:21+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2332, "days_push": 1749, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1378, forks 155 (observed 2026-08-28T04:04:33.540504+00:00)

## What it is
A pure Python3 fake MySQL server used in penetration testing to exploit MySQL client file reading and trigger Java deserialization attacks against MySQL JDBC clients. It serves crafted responses based on the login username and integrates with ysoserial for payload generation.

## Use cases
- read arbitrary files from MySQL clients via malicious server
- exploit MySQL JDBC client Java deserialization vulnerabilities
- test MySQL Connector/J autoDeserialize attack vectors
- capture files from tools like PHPMyAdmin or Navicat connecting to a fake MySQL server
- generate ysoserial payloads through JDBC connection strings
- simulate a malicious MySQL server during red team engagements

## When to choose
- you are performing authorized penetration testing against MySQL clients
- you need to test whether a JDBC client is vulnerable to deserialization attacks
- you want a dependency-free Python tool for MySQL client file reading exploits

## When to avoid
- you need a real MySQL database server
- you are not authorized to test the target systems
- you need a maintained tool with active support and a license

## Facets
- artifact type: service
- maturity: maintenance
- function: security, networking, developer-tools
- domain: security, penetration-testing, databases, developer-tools
- platform: python, cross-platform, cli
- tags: fake-server, mysql, penetration-testing, file-reading, java-deserialization, jdbc-exploit, red-team, security-tools

## Member repositories
- fnmsd/MySQL_Fake_Server (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:33.540504+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:40:22.394750+00:00, confidence not recorded.
  - readme: https://github.com/fnmsd/MySQL_Fake_Server (fetched 2026-08-28T04:04:33.540504+00:00, sha 1aab4699c980)
- Data as of 2026-08-30T08:39:29.467469+00:00.