Another method for MYSQL Privilege Escalation

Reprinted with the source h4x0er.org

Idea: Download The MYSQL Data of the server and check the ROOT password locally for privilege escalation.

Make sure that the MYSQL installation directory is readable.

Log on to PHPMYADMIN by setting up MYSQL locally

Find the MYSQL installation directory in SHELL

For example, C:/MYSQL5/enter the C:/MYSQL5/DATA file and find the MYSQL folder.

[3] USER tables in the table are downloaded to the local device.

In the local MYSQL directory, find the DATA/MYSQL directory and create a new directory: arbitrary (123)
Put the downloaded USER in the MYSQL directory DATA/123 directory [This is the directory we created]

Log on to PHPMYADMIN, and we can see that one database is 123 more.
When we enter the 123 database, we can find that a USER is the name of the data we downloaded.

Then, enter and find the password of the ROOT account.

In this way, I can easily find the password of the ROOT account.