Private Crypter - Unique Private Stubs ◆ ZexoCard: no-KYC virtual crypto cards ◆ Traffic service & campaign optimization ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › how can i connect the my target database MySQL

New Reply 

how can i connect the my target database MySQL
r3el
r3el Offline
[n00b@HF:]
*
Registered
Posts:
63
Threads:
11
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 24, 2018 02:43 PM (This post was last modified: May 24, 2018 02:45 PM by r3el.)
i downloded the config file and i found
DB_USER :
DB_PASSWORD:
DB_HOST:localhost

and i dont have a shell in the server
so how can i connect ?
Chris.fussner
Chris.fussner Offline
[closed@HF:]
Posts:
534
Threads:
20
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 24, 2018 02:47 PM
(May 24, 2018 02:43 PM)r3el Wrote:  i downloded the config file and i found
DB_USER :
DB_PASSWORD:
DB_HOST:localhost

and i dont have a shell in the server
so how can i connect ?

You would need a shell to be on their localhost...
r3el
r3el Offline
[n00b@HF:]
*
Registered
Posts:
63
Threads:
11
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 24, 2018 02:51 PM
(May 24, 2018 02:47 PM)Chris.fussner Wrote:  You would need a shell to be on their localhost...

there is no other method ?
Chris.fussner
Chris.fussner Offline
[closed@HF:]
Posts:
534
Threads:
20
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 24, 2018 02:55 PM
(May 24, 2018 02:51 PM)r3el Wrote:  there is no other method ?

Not unless you can either bypass a WAF, hack into the server through vulnerable software versions or social engineer the admin.
r3el
r3el Offline
[n00b@HF:]
*
Registered
Posts:
63
Threads:
11
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 24, 2018 03:03 PM
(May 24, 2018 02:55 PM)Chris.fussner Wrote:  Not unless you can either bypass a WAF, hack into the server through vulnerable software versions or social engineer the admin.

ah really i idk about bypass a WAF
so thank you anyway
btw if you wanna i will give you the website and the config :p
Chris.fussner
Chris.fussner Offline
[closed@HF:]
Posts:
534
Threads:
20
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 24, 2018 03:04 PM
(May 24, 2018 03:03 PM)r3el Wrote:  ah really i idk about bypass a WAF
so thank you anyway
btw if you wanna i will give you the website and the config :p

No thanks. Its useless to me :)
Crystallize.
Crystallize. Offline
[closed@HF:]
Posts:
4,154
Threads:
330
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 26, 2018 05:48 AM
Tell me the website in PMs and I’ll look into it.
r3el
r3el Offline
[n00b@HF:]
*
Registered
Posts:
63
Threads:
11
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 26, 2018 11:39 AM
(May 26, 2018 05:48 AM)Crystallize. Wrote:  Tell me the website in PMs and I’ll look into it.

ok check your inbox,
after, tell me how please
Noxcrawler
Noxcrawler Offline
[n00b@HF:]
*
Registered
Posts:
8
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 26, 2018 05:43 PM
there a way:
verify if the server has port 3306 open with nmap
if so just connect with SQL software to the server & if you have linux in your box then just
connect with the command:
mysql -h <your target> -u <username> -p<password(do not leave a space between -p and the password)>
Chris.fussner
Chris.fussner Offline
[closed@HF:]
Posts:
534
Threads:
20
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 26, 2018 05:47 PM
(May 26, 2018 05:43 PM)Noxcrawler Wrote:  there a way:
verify if the server has port 3306 open with nmap
if so just connect with SQL software to the server & if you have linux in your box then just
connect with the command:
mysql -h <your target> -u <username> -p<password(do not leave a space between -p and the password)>

Really dude..... how will he have the password idiot...
Noxcrawler
Noxcrawler Offline
[n00b@HF:]
*
Registered
Posts:
8
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 26, 2018 05:55 PM
username & password are in the config file he just hid it, if not how can he ask such question
r3el
r3el Offline
[n00b@HF:]
*
Registered
Posts:
63
Threads:
11
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 26, 2018 07:27 PM (This post was last modified: May 26, 2018 07:36 PM by r3el.)
(May 26, 2018 05:43 PM)Noxcrawler Wrote:  there a way:
verify if the server has port 3306 open with nmap
if so just connect with SQL software to the server & if you have linux in your box then just
connect with the command:
mysql -h <your target> -u <username> -p<password(do not leave a space between -p and the password)>

ok i will try , thank u
(May 26, 2018 05:47 PM)Chris.fussner Wrote:  Really dude..... how will he have the password idiot...

i have the database -_-
(May 26, 2018 05:43 PM)Noxcrawler Wrote:  there a way:
verify if the server has port 3306 open with nmap
if so just connect with SQL software to the server & if you have linux in your box then just
connect with the command:
mysql -h <your target> -u <username> -p<password(do not leave a space between -p and the password)>

and what if the port is closed ? how can i connect ??
Chris.fussner
Chris.fussner Offline
[closed@HF:]
Posts:
534
Threads:
20
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 27, 2018 02:47 AM
You dont have the database. You said it yourself. You have the localhost login php file which states (LOCALHOST) you havent got shit man... that means that it can only be accessed from within the target network. You aint got shit...
r3el
r3el Offline
[n00b@HF:]
*
Registered
Posts:
63
Threads:
11
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 27, 2018 03:18 AM
(May 27, 2018 02:47 AM)Chris.fussner Wrote:  You dont have the database. You said it yourself. You have the localhost login php file which states (LOCALHOST) you havent got shit man... that means that it can only be accessed from within the target network. You aint got shit...

i have the database
also i have all the backup of the webstite
Chris.fussner
Chris.fussner Offline
[closed@HF:]
Posts:
534
Threads:
20
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 27, 2018 03:23 AM
(May 27, 2018 03:18 AM)r3el Wrote:  i have the database
also i have all the backup of the webstite

So if you have the database and the website why cant you access the database?
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Q00Jan 22, 2025 01:39 AM 12 1,397 Jan 22, 2025 01:39 AM
Last Post: Bastille
by Th3Gh05tDec 31, 2021 02:05 PM 2 183 Dec 31, 2021 02:05 PM
Last Post: memory
by gussiAug 3, 2017 02:18 AM 2 147 Aug 3, 2017 02:18 AM
Last Post: sysadmn