+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: What can I do with Load:/ect/passwd (/showthread.php?tid=5534816)
What can I do with Load:/ect/passwd - Vanderbilt - Jan 26, 2017
I see this when im sql dumping. How can I take advantage if it?
* - _NY_ - Jan 26, 2017
wait, are you seeing the contents of the it, or just the path?
* - Vanderbilt - Jan 26, 2017
(Jan 26, 2017 05:30 PM)_NY_ Wrote: wait, are you seeing the contents of the it, or just the path?
Just the path
* - egyy - Jan 26, 2017
Well you can't do anything with /ect/passwd but you could see all the sys usernames & UID's with /etc/passwd
* - Magicicada³³⁰¹ - Jan 26, 2017
On a good day you can find an LFI vulnerability and end up with a shell/ server root.
* - •^v^–[ bLacKn3x ]–^v^• - Jan 26, 2017
Nothing :(
but
Use it for shell upload via sqli :)
If you can use load_file ,magic_qoutes_off is disabled :)