[spyhigh]

i have found a arbitrary file download vuln in a website .. it is sub domain .. how can i hack entire web .. i have also accessed mysql credentials but perhaps they are privileged

[sinmar]

try using sqlmap bro i heard it works

[spyhigh]

how would i able to drop web backdoor it has privileged user .. and also mysql is ip restricted //..it is quite difficult .. i should able to get root of mysql .. and need other techniques ..