+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: FPD Help (/Thread-FPD-Help)
FPD Help - Crypt - 07-20-2015
I'm logged into PHPmyadmin on a website which has the mysql user running as root, I've tried the array and session cookie methods and have had no luck finding the full path. My intention is to shell it. I've also tried getting the admin's password, but it's hashed with some really weird unidentifiable hashing method so I'd rather shell it through MySQL.
Is there anything left to try? Thanks in advance.
RE: FPD Help - Dyme - 07-20-2015
Since you're running as root, load_file() should be helpful. Try reading the apache config file and look for VirtualHost configurations.
Also, do you know if the site is running a particular CMS?
RE: FPD Help - Crypt - 07-20-2015
(07-20-2015, 11:34 PM)Dyme Wrote: Since you're running as root, load_file() should be helpful. Try reading the apache config file and look for VirtualHost configurations.
Also, do you know if the site is running a particular CMS?
No I don't; I could PM you the site along with the phpMyadmin stuff if that helps.
RE: FPD Help - Dyme - 07-21-2015
(07-20-2015, 11:59 PM)Crypt Wrote: No I don't; I could PM you the site along with the phpMyadmin stuff if that helps.
yeah if you want or message me on jabber.