+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Any way to find root password, or give yourself elevated permissions on a mysql db? (/showthread.php?tid=5430253)
Any way to find root password, or give yourself elevated permissions on a mysql db? - DynamicDunce - Oct 11, 2016
so, I have access to the mysql database that a friend of mine's website runs off.
I was wondering if there is any way, using the access I already have or otherwise, to gain full root access, either by logging in as root, or by giving myself elevated permissions, to the database?
The web client runs phpmyadmin
Here is some info about the database:
Server: Localhost via UNIX socket
Server type: MySQL
Server version: 5.5.50-0ubuntu0.14.04.1 - (Ubuntu)
Protocol version: 10
Server charset: UTF-8 Unicode (utf8)
Apache/2.4.7 (Ubuntu)
Database client version: libmysql - 5.5.50
PHP extension: mysqli Documentation
Phpmyadmin version: 4.0.10deb1
What can I do to gain access to read/write tables etc that I dont currently have access to?
* - 8lue7ornado - Oct 12, 2016
You could try with sql injection, either manually or with sqlmap!