92

MySQL UDF提权获取主机控制权-IT技术分享-51CTO博客

 6 years ago
source link: http://blog.51cto.com/watertoeast/2068563
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
UDF(Userdefinedfunction)是MySQL的一个拓展接口,用来扩展MySQL的功能。在具备MySQL管理员访问权限的条件下,可利用该特性进行提权,获取所在主机的控制权。下面以windows主机为例,给出具体的步骤:1、pythonclock.py-d-ilib_mysqludfsys.dll此步是获取攻击用的UDFdll。首先要安装sqlmap,然后运行上述命令即可得到解码之后的

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK