+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Get website ip address by SQL query (/showthread.php?tid=6242316)
Get website ip address by SQL query - whitehack - May 22, 2023
A vulnerable website allows me to run SQL query. By this select query I can get list of table names, databases etc.
Now I want to run from MySQL workbench so how do I get host ip address. I can connect user and password if I know the ip address.
Any update?
RE: Get website ip address by SQL query - 4096 - May 22, 2023
why dont you just in cmd type:
ping ip
RE: Get website ip address by SQL query - Dread.Reaper - May 23, 2023
(May 22, 2023 09:47 PM)whitehack Wrote: A vulnerable website allows me to run SQL query. By this select query I can get list of table names, databases etc.
Now I want to run from MySQL workbench so how do I get host ip address. I can connect user and password if I know the ip address.
Any update?
Chances are even if you did somehow manage to get any host or address from the SQL it would likely be localhost....
RE: Get website ip address by SQL query - cover7 - May 24, 2023
If the website is protected by a reverse proxy like cloudflare etc I can try and get you the real ip hmu on tele @kkfbtk
RE: Get website ip address by SQL query - source - May 24, 2023
If you can run SQL queries why not get admin access and find IP that way?
With access to the admin panel im sure youd be able to pop a shell.
RE: Get website ip address by SQL query - whitehack - May 25, 2023
(May 24, 2023 05:53 PM)░▒▓█ Wrote: If you can run SQL queries why not get admin access and find IP that way?
With access to the admin panel im sure youd be able to pop a shell.
How can I get admin access by SQL query?
RE: Get website ip address by SQL query - Skorp - May 25, 2023
No need for a SQL query, you are doing more work for nothing. Many ways to do this. A couple is to check the sites server records, DNS history. Also check for any forms, whether it is for submitting receiving from or to the server itself. You can usually intercept it from there if the owner does not have full server protection.
If those fail, PM me.
RE: Get website ip address by SQL query - whitehack - May 25, 2023
(May 25, 2023 06:38 PM)Skorp Wrote: No need for a SQL query, you are doing more work for nothing. Many ways to do this. A couple is to check the sites server records, DNS history. Also check for any forms, whether it is for submitting receiving from or to the server itself. You can usually intercept it from there if the owner does not have full server protection.
If those fail, PM me.
Yes... I'm going through to find that kind of form. Unfortunately the site store uploaded file into AWS s3 bucket. So the only vulnerable, till now in my view is running SQL Query. The site designed in Laravel framework