Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Get website ip address by SQL query

A vulnerable website allows me to run SQL query. By this select query I can get list of table names, databases etc.

Now I want to run from MySQL workbench so how do I get host ip address. I can connect user and password if I know the ip address.


Any update?
why dont you just in cmd type:
ping ip
(May 22, 2023 09:47 PM)whitehack Wrote:  A vulnerable website allows me to run SQL query. By this select query I can get list of table names, databases etc.

Now I want to run from MySQL workbench so how do I get host ip address. I can connect user and password if I know the ip address.


Any update?

Chances are even if you did somehow manage to get any host or address from the SQL it would likely be localhost....
If the website is protected by a reverse proxy like cloudflare etc I can try and get you the real ip hmu on tele @kkfbtk
If you can run SQL queries why not get admin access and find IP that way?

With access to the admin panel im sure youd be able to pop a shell.
(May 24, 2023 05:53 PM)source Wrote:  If you can run SQL queries why not get admin access and find IP that way?

With access to the admin panel im sure youd be able to pop a shell.

How can I get admin access by SQL query?
No need for a SQL query, you are doing more work for nothing. Many ways to do this. A couple is to check the sites server records, DNS history. Also check for any forms, whether it is for submitting receiving from or to the server itself. You can usually intercept it from there if the owner does not have full server protection.

If those fail, PM me.
[Image: vGscZ.gif]
(May 25, 2023 06:38 PM)Skorp Wrote:  No need for a SQL query, you are doing more work for nothing. Many ways to do this. A couple is to check the sites server records, DNS history. Also check for any forms, whether it is for submitting receiving from or to the server itself. You can usually intercept it from there if the owner does not have full server protection.

If those fail, PM me.

Yes... I'm going through to find that kind of form. Unfortunately the site store uploaded file into AWS s3 bucket. So the only vulnerable, till now in my view is running SQL Query. The site designed in Laravel framework


Possibly Related Threads...
Thread / Author Replies Views Last Post
by BungleFeb 7, 2016 01:38 AM 4 693 Feb 7, 2016 01:38 AM
Last Post: Bungle
by M4d_V1r0uSJan 23, 2014 05:43 AM 2 82 Jan 23, 2014 05:43 AM
Last Post: Crysan
by M4d_V1r0uSJan 21, 2014 10:06 AM 0 53 Jan 21, 2014 10:06 AM
Last Post: M4d_V1r0uS