All the admin page finders turn up nothing, 99% of the websites i have user:pass with admin privs to i can't find the pages. Any tips?
Have many logins but don't know where to login? |
(Apr 2, 2015 06:23 AM)Viktory Wrote: You can use a better admin finder, check /robots.txt for a login, or as a last resort check for file_priv if you have a SQLi vulnerability and skip having to mess with admin logins altogether I'm still extremely new to this and gettings the databases is about as far as i can go. If you could help me out with skipping login in I would be greatful (Apr 3, 2015 12:50 AM)iRoyals Wrote: I'm still extremely new to this and gettings the databases is about as far as i can go. If you could help me out with skipping login in I would be greatful Select concat(user,file_priv) from mysql.user Read up a guide on how to upload a shell using SQLi.
Can you hear my voice
come thru the music? (Apr 3, 2015 03:43 AM)Viktory Wrote: Select concat(user,file_priv) from mysql.user This was actually a useful reply. Thanks alot man I played around and I understand how to use it just gotta find the right situation to make use of it. Didnt have much luck with the shell though, all tutorials seem to take into consideration you have access to the admin panel. |
|
|

