In a linux system, mysql Elevation of Privilege when logging on with the root permission
In the linux version of mysql5.x, there is a function that can help us do a lot of tedious things, this function 4. There seems to be none below x. I haven't found it and haven't checked the function manual. I just wrote something in my own experience. 4. Let's take a look at the function manual tomorrow for another experiment.
Mysql 5. x introduces a system function. This function can execute system commands. when mysql logs in as root, it can be used to execute commands, of course, within the permitted range.
Privilege Escalation starts as follows:
Lab environment:
A: 192.168.211.128 (mysql version: 5.0.77)
B: 192.168.211.131
Experiment process:
On Machine B, connect to the database of machine A through the root user (this must be distinguished here, this root user is from mysql, not from linux ).
Now that you have connected to the database of host A, you can call the system function.
Well, the idea is here. Let's use the rest of them.