[yellowpad]

i can show all available database using weevely .
but when i use the one of database an error msg show 'no data returned check credentials and dbms availability'
[img]http://s10.postimg.org/qvkak4okl/hyea.jpg[/img]

[yellowpad]

That's because you have to provide the correct credentials to log in. Weevely isn't just gonna magically give you access to the database but it can enumerate the names. Who uses weevely anyway? lmao

i set the correct user and password which i found in config.php of the site .. in my screenshoot that i show you see that i can list all databases but i cant execute the select database query

[yellowpad]

You would be better off uploading a PHP web-shell and try logging into the database that way. The credentials may be false or it could just be weevely acting all buggy like it usually does. Seriously, don't use weevely

i cant use php webshell because the cloudflare detect it .!! like wso or c99 .. so i maked my own mysql interface in php which have ugly interface 😵

---

Check What User You Are, you might Not Have Perms

i think weevely is only supporting the 'show databases' in mysql

i try to installed backdoor to my server and the result is the same

here is the result
[img]http://s12.postimg.org/j3xtvfoq1/try1.jpg[/img]

[yellowpad]

Cloudfare eh? I'm sure all they did was take the source or the MD5/SHA-1 checksum and put it in their AV database. So editing the code slightly would completely change the checksum, thus making the web-shell UD. Then again they may have a more advanced system..It's worth a shot though.

I'd check out NeoPI and these links, they might help you:

Code

https://bechtsoudis.com/hacking/maths-behind-web-shell-code-detection/
http://www.exploit-db.com/wp-content/themes/exploit/docs/18216.pdf

tnx for this link !!... great alternative to weevely backdoor

[Warphunt]

You typed wrong database name... what the hell...

[yellowpad]

You typed wrong database name... what the hell...

😶😶😶😶😶😶😶😶😶😶😶😶😠😯🤫