+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Can i still access the database if its on 127.0.0.1 (/showthread.php?tid=5910774)
Can i still access the database if its on 127.0.0.1 - Vanderbilt - Nov 22, 2018
I shelled a site and i found the db config.
DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
Can i still access it over the web? I dont have cpanel access.
RE: Can i still access the database if its on 127.0.0.1 - Hooded Robin - Nov 22, 2018
Yes, but you'll need to access it from the victim since you can't access directly (via WAN IP). If you have a web shell with mysql functions built-in then it should work just fine for you, since all requests from the web shell would be considered localhost for that victim box. Another alternative is to pop a reverse shell, upgrade to some TTY support, then use the mysql client on the victim to connect to the localhost database to peruse as you like.
RE: Can i still access the database if its on 127.0.0.1 - Abruptum - Nov 22, 2018
(Nov 22, 2018 07:51 AM)Vanderbilt Wrote: I shelled a site and i found the db config.
DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
Can i still access it over the web? I dont have cpanel access.
It is not possible to access it externaly over direct connection. You need to connect through the Server to reach it.
The easiest way would be to scan for a sql manager such as phpmyadmin.
Harder would it be to change the config somehow.
RE: Can i still access the database if its on 127.0.0.1 - Vanderbilt - Nov 22, 2018
Figured this out fairly recently after this thread, thanks guys!