Scan the following situation:
1. MYSQL's root empty password, version 5.x; SSH open, Protocol version 2.0.
Port 2.80 is a freepbx, And the uploading location is not fixed. There is no phpinfo () related page and the web path is not developed.
3. No other web programs or ftp.
In this case, the idea is often locked in the shell obtained through freepbx or the web path obtained through it. As long as you get the web path, you can use the mysql root to export a shell immediately.
However, I use another method:
View mysql Data and find an administrator table to obtain two administrator data. Mysql user data is also obtained. But there is no ftp, so you can try SSH directly.
I was disappointed that the password of the background administrator could not match the system root password, but I was excited that there were two root users of mysql, one being a blank password, which is also the entrance to my entry, we also tried it after breaking it out. The result was the root password of the CentOS system.