<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>惜分飞 &#187; mysql应用删除恢复</title>
	<atom:link href="https://www.xifenfei.com/tag/mysql%e5%ba%94%e7%94%a8%e5%88%a0%e9%99%a4%e6%81%a2%e5%a4%8d/feed" rel="self" type="application/rss+xml" />
	<link>https://www.xifenfei.com</link>
	<description>提供7*24专业数据库(Oracle,SQL Server,MySQL,PostgreSQL等)恢复和技术支持@Tel:17813235971</description>
	<lastBuildDate>Thu, 29 Oct 2026 15:31:46 +0000</lastBuildDate>
	<language>zh-CN</language>
		<sy:updatePeriod>hourly</sy:updatePeriod>
		<sy:updateFrequency>1</sy:updateFrequency>
	
	<item>
		<title>mysql数据库被黑恢复&#8212;应用层面delete删除</title>
		<link>https://www.xifenfei.com/2024/01/mysql-hacked-recovery.html</link>
		<comments>https://www.xifenfei.com/2024/01/mysql-hacked-recovery.html#comments</comments>
		<pubDate>Fri, 12 Jan 2024 05:27:40 +0000</pubDate>
		<dc:creator><![CDATA[惜分飞]]></dc:creator>
				<category><![CDATA[MySQL恢复]]></category>
		<category><![CDATA[mysql应用删除恢复]]></category>
		<category><![CDATA[mysql被攻击恢复]]></category>

		<guid isPermaLink="false">https://www.xifenfei.com/?p=10588</guid>
		<description><![CDATA[联系：手机/微信(+86 17813235971) QQ(107644445)  &#8230; <a href="https://www.xifenfei.com/2024/01/mysql-hacked-recovery.html">继续阅读 <span class="meta-nav">&#8594;</span></a>]]></description>
				<content:encoded><![CDATA[<div id="xifenfeicopyright">
<p>联系：<a href="https://www.xifenfei.com/about_xifenfei" target="_blank">手机/微信(+86 17813235971)   QQ(107644445)</a><a target="_blank" href="http://wpa.qq.com/msgrd?v=3&#038;uin=107644445&#038;site=qq&#038;menu=yes"><img src="https://www.xifenfei.com/wp-content/themes/img/site_qq.jpg" alt="QQ咨询惜分飞" title="QQ咨询惜分飞"/></a></p>
<p>标题：<a href="https://www.xifenfei.com/2024/01/mysql-hacked-recovery.html" target="_blank">mysql数据库被黑恢复&#8212;应用层面delete删除</a></p>
<p>作者：<a href="https://www.xifenfei.com" target="_blank">惜分飞</a>©版权所有[未经本人同意,不得以任何形式转载,否则有进一步追究法律责任的权利.]</p>
</div>
<p>客户的mysql被人从应用层面攻击,并且删除了一些数据,导致业务无法正常使用,通过底层分析binlog确认类似恢复操作<br />
<a href="https://www.xifenfei.com/wp-content/uploads/2024/01/20240112131751.png"><img src="https://www.xifenfei.com/wp-content/uploads/2024/01/20240112131751.png" alt="20240112131751" width="945" height="601" class="alignnone size-full wp-image-10589" /></a><br />
<hr />
确认这类的业务破坏是通过delete操作实现的,客户那边不太幸,客户找了多人进行恢复,现场严重破坏,老库被删除,并且还原了历史的备份文件(非故障第一现场),通过底层扫描恢复出来ibd和page文件,然后解析对应的文件,运气不错,恢复出来客户需要的数据<br />
<a href="https://www.xifenfei.com/wp-content/uploads/2024/01/20240112131907.png"><img src="https://www.xifenfei.com/wp-content/uploads/2024/01/20240112131907.png" alt="20240112131907" width="861" height="622" class="alignnone size-full wp-image-10590" /></a><br />
<hr />
<div id="crp_related"><ul><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/02/hudsonlcock-li-mkp-recovery.html" rel="bookmark" class="crp_title">.[hudsonL@cock.li].mkp勒索加密数据库完美恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/08/ora-600-kcvfdb_pdb_set_clean_scn-cleanckpt.html" rel="bookmark" class="crp_title">ORA-600 [kcvfdb_pdb_set_clean_scn: cleanckpt] 相关bug</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/05/distributed-storage-ora-00354-ora-00353.html" rel="bookmark" class="crp_title">分布式存储故障导致数据库无法启动故障处理</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2022/07/delete-partition-oracle-recovery.html" rel="bookmark" class="crp_title">误删除分区oracle数据库恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2026/06/deepseek_oracle_recovery_major_fault.html" rel="bookmark" class="crp_title">使用deepseek进行Oracle恢复,引起重大故障</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/12/wstop-recovery.html" rel="bookmark" class="crp_title">.wstop扩展名勒索数据库恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2021/05/11-2-0-4-psu-service-not-start.html" rel="bookmark" class="crp_title">win 11.2.0.4打patch后服务无法正常启动处理</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2022/07/ora-702_recovery-tool.html" rel="bookmark" class="crp_title">ORA-00702一键恢复工具</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2022/06/ora-01110-ora-17070-osd-04006.html" rel="bookmark" class="crp_title">ORA-01110 ORA-17070 OSD-04006 故障恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2022/12/crs-2674-root-sh-failed.html" rel="bookmark" class="crp_title">RAC节点时间间隔过大导致执行root.sh不成功</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2023/12/kettle-lost-mysql-data-recovery.html" rel="bookmark" class="crp_title">kettle导致MySQL数据丢失恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2021/10/makop-recovery.html" rel="bookmark" class="crp_title">.makop加密数据库恢复</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>https://www.xifenfei.com/2024/01/mysql-hacked-recovery.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
