Waraxe IT Security Portal

tehhunter · Valuable expert

So I find myself frequently getting SQL access on some particular sites, and the problem is that the sites themselves aren't particulating too titillating. That is to say, little good stuff if you know what I mean.

So is there any way to go about attempting to elevate my priviledges so that I might be able to dabble around in other sites that are hosted on the server? Nothing in particular, and if the answer is a resounding 'no', then that'd be fine too. Just wondering.

Waraxe, got any tricks up your sleeve?

[edit] forgot to mention that I work mostly with MySQL servers, and do try to read other databases and mysql.users but most of the time its blocked.

Anyway, thanks.

tehhunter · Valuable expert

bumpity

waraxe · Site admin

If you got mysql access and if it's shared hosting, then usually you can't access mysql.user table and do not have FILE privileges for INTO OUTFILE and LOAD_FILE(). There is no direct escalation vectors in current mysql versions that I am aware of. So concentrate your efforts against web application, that is using mysql. Admin privileges in web apps can often lead to php execution level. One more thing to try is mysql root password bruteforce and/or wordlist attack.