+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: having mysql root password what now (/showthread.php?tid=4195453)
having mysql root password what now - macnux - Apr 26, 2014
Hi
i was able to get config file of a site that uses root user
now what i should do?
the server do not allow remote connections
* - ~OMC~ - Apr 26, 2014
Try using that password to log into the owners account, or find an SQL vulnerability of some sort.
* - macnux - Apr 26, 2014
i have SQL vulnerability and i get the password hash but i couldn't crack it
all sites i know does not crack it
any way
i have now is mysql root password and md5 of the admin panel of the website
what i can do?
* - ℛℛℛoooℛℛℛ - Apr 26, 2014
(Apr 26, 2014 04:39 PM)macnux Wrote: i have SQL vulnerability and i get the password hash but i couldn't crack it
all sites i know does not crack it
any way
i have now is mysql root password and md5 of the admin panel of the website
what i can do?
Well if you cant crack them online, then try to crack them offline using JTR. If you cant really crack them then just move on, they're encrypted for a reason, its not like you can just "Pass the Hash", if you know what i mean.
-Chosen-
* - LocoJose - Apr 26, 2014
Check if the script that contain the SQLi vuln has write privs. Maybe script run with root user too, if so you should be able to upload a shell via SQLi!
* - macnux - Apr 26, 2014
i try to upload the shell using sqlmap but i it gives error says
Code
[WARNING] HTTP error codes detected during run:
404 (Not Found) - 1 timesthe only option i have with the system i can read files (like reading config files as i do) no writing no uploading
* - Flamco - Apr 27, 2014
same problem m8
having root account and sql map read file option, im trying to figure it out
* - LocoJose - Apr 27, 2014
Forget about tools, try to check manually for write Privs! Tools may often work false positive and positive false :)
* - Flamco - Apr 27, 2014
you can write to /tmp
try to find some temp directory in www root or cache dir
var/www/tmp
and you can login as different user with sqlmap
--dbms-cred=DBMS.. DBMS authentication credentials (user:password)
--dbms-cred=root:pass
(Apr 26, 2014 06:31 PM)macnux Wrote: i try to upload the shell using sqlmap but i it gives error says
Code[WARNING] HTTP error codes detected during run:
404 (Not Found) - 1 times
the only option i have with the system i can read files (like reading config files as i do) no writing no uploading
download index.php
and then look for includes *.php download them and look into code
* - macnux - Apr 27, 2014
i use --dbms-cred=root:pass but the same WARNING