Waraxe IT Security Portal
Login or Register
November 6, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 76
Members: 0
Total: 76
Full disclosure
4 vulnerabilities in ibmsecurity
32 vulnerabilities in IBM Security Verify Access
xlibre Xnest security advisory & bugfix releases
APPLE-SA-10-29-2024-1 Safari 18.1
SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600)
SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333)
APPLE-SA-10-28-2024-8 visionOS 2.1
APPLE-SA-10-28-2024-7 tvOS 18.1
APPLE-SA-10-28-2024-6 watchOS 11.1
APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1
APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1
APPLE-SA-10-28-2024-3 macOS Sequoia 15.1
APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1
APPLE-SA-10-28-2024-1 iOS 18.1 and iPadOS 18.1
Open Redirect / Reflected XSS - booked-schedulerv2.8.5
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Newbies corner -> mysql to gain root previleges
Post new topicReply to topic View previous topic :: View next topic
mysql to gain root previleges
PostPosted: Wed Jul 23, 2008 11:28 pm Reply with quote
badrh0
Active user
Active user
Joined: Jul 06, 2008
Posts: 32




hello,
I've uploaded a shell on a server but unfortunately I have read-only on the most important pages Exclamation
But I heard that I can gain root access by putting the shell through SQL, and I have an access on phpmyadmin as root, so I'm sure that I can do something, but I don't know what and how !!! if anyone can help me Smile
thx
View user's profile Send private message
Re: mysql to gain root previleges
PostPosted: Thu Jul 24, 2008 4:52 am Reply with quote
pexli
Valuable expert
Valuable expert
Joined: May 24, 2007
Posts: 665
Location: Bulgaria




badrh0 wrote:
hello,
I've uploaded a shell on a server but unfortunately I have read-only on the most important pages Exclamation
But I heard that I can gain root access by putting the shell through SQL, and I have an access on phpmyadmin as root, so I'm sure that I can do something, but I don't know what and how !!! if anyone can help me Smile
thx


Somebody lie to you.If you upload shell via SQL that give's you mysql mysql perm's not root.
View user's profile Send private message
PostPosted: Thu Jul 24, 2008 11:00 am Reply with quote
badrh0
Active user
Active user
Joined: Jul 06, 2008
Posts: 32




Hi,
So what can I do so ??? is there any solution for elevating my privileges ?
View user's profile Send private message
PostPosted: Thu Jul 24, 2008 12:15 pm Reply with quote
waraxe
Site admin
Site admin
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




You need local root exploit. Can you post here target system details, including kernel version?
View user's profile Send private message Send e-mail Visit poster's website
PostPosted: Thu Jul 24, 2008 1:29 pm Reply with quote
badrh0
Active user
Active user
Joined: Jul 06, 2008
Posts: 32




Hi,
Here are the system details ....
Code:

Kernel version: Linux ************* 2.6.9-5.ELsmp #1 SMP Wed Jan 5 19:30:39 EST 2005 i686 i686 i386 GNU/Linux

Software: Apache/2.0.52 (Red Hat). PHP/4.3.9

Safe-mode: OFF (no secure)

MySQL 4.1.7

Open ports:
tcp 0 0 *:mysql *:* LISTEN -
tcp 0 0 *:76 *:* LISTEN -
tcp 0 0 *:sunrpc *:* LISTEN -
tcp 0 0 localhost:ipp *:* LISTEN -
tcp 0 0 localhost:smtp *:* LISTEN -
tcp 0 0 *:http *:* LISTEN -
tcp 0 0 *:ssh *:* LISTEN -
tcp 0 0 *:https *:* LISTEN -

Server API Apache 2.0 Handler


something else ?
View user's profile Send private message
PostPosted: Thu Jul 24, 2008 3:20 pm Reply with quote
waraxe
Site admin
Site admin
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




Kernel version is 2.6.9? Newest version is allready 2.6.26:

http://kernel.org/

And there is lots of various exploits floating around against old kernels.
For example:

http://www.milw0rm.com/search.php?dong=kernel
View user's profile Send private message Send e-mail Visit poster's website
PostPosted: Thu Jul 24, 2008 5:42 pm Reply with quote
pexli
Valuable expert
Valuable expert
Joined: May 24, 2007
Posts: 665
Location: Bulgaria




waraxe wrote:
Kernel version is 2.6.9? Newest version is allready 2.6.26:

http://kernel.org/

And there is lots of various exploits floating around against old kernels.
For example:

http://www.milw0rm.com/search.php?dong=kernel



Думаеш он сечет что ет такое?Я честно сомневаюсь.Послать он сервак в дауне ему удастся. Laughing
View user's profile Send private message
PostPosted: Thu Jul 24, 2008 10:14 pm Reply with quote
badrh0
Active user
Active user
Joined: Jul 06, 2008
Posts: 32




waraxe wrote:
Kernel version is 2.6.9? Newest version is allready 2.6.26:

http://kernel.org/

And there is lots of various exploits floating around against old kernels.
For example:

http://www.milw0rm.com/search.php?dong=kernel

Yes it's really very old !!!!! but unfortunately there is no gcc !!! and all exploits that I found are in C !!! So what can I do on this old version ?
koko wrote:
Думаеш он сечет что ет такое?Я честно сомневаюсь.Послать он сервак в дауне ему удастся. Laughing

It's like 外交部:劝美国个别议员停用人权问题干扰奥运 答问 for me !!! Laughing
View user's profile Send private message
PostPosted: Thu Jul 24, 2008 10:27 pm Reply with quote
waraxe
Site admin
Site admin
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




You can set up test box with similar linux distribution and then compile and test exploits on test machine. And then just upload precompiled files to target server and try them there.
View user's profile Send private message Send e-mail Visit poster's website
PostPosted: Fri Jul 25, 2008 3:48 pm Reply with quote
badrh0
Active user
Active user
Joined: Jul 06, 2008
Posts: 32




waraxe wrote:
You can set up test box with similar linux distribution and then compile and test exploits on test machine. And then just upload precompiled files to target server and try them there.

Hi;
Am I obliged to compile them on the same version ? 'cause I tried to compile a hello.c on my machine (2.6.26) but the compiled file wont execute on the target server !!!!
Why you said "precompiled" ??!!
View user's profile Send private message
PostPosted: Fri Jul 25, 2008 7:40 pm Reply with quote
waraxe
Site admin
Site admin
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




Of course this is no trivial task. If webserver admin was paranoid enough to delete c compiler, then it's obvious that rooting will be harder to accomplish.
You need knowledge and experience in linux/c above average.
That "Hello world" test program - did you got error messages?
View user's profile Send private message Send e-mail Visit poster's website
PostPosted: Fri Jul 25, 2008 8:29 pm Reply with quote
badrh0
Active user
Active user
Joined: Jul 06, 2008
Posts: 32




waraxe wrote:
Of course this is no trivial task. If webserver admin was paranoid enough to delete c compiler, then it's obvious that rooting will be harder to accomplish.
You need knowledge and experience in linux/c above average.

After some other tries I remarked that all these commands doesn't display anything !!!!
Code:

locate gcc ===> gives nothing
locate perl ===> gives nothing

but also Question
Code:

locate php ===> gives nothing !!!!!!!!!

Which is surely wrong !!!!!
So what is the problem with my shell ?!!!!! other commands like
Code:

uname -a

worked, so it is not a shell issue !!!
waraxe wrote:
That "Hello world" test program - did you got error messages?

Code:
./hello

displayed nothing !!!!! Exclamation
View user's profile Send private message
PostPosted: Fri Jul 25, 2008 8:40 pm Reply with quote
badrh0
Active user
Active user
Joined: Jul 06, 2008
Posts: 32




I looked at /usr/bin and gcc is present !!!
So why my commands didn't work ? why gcc didn't work ??? Question
View user's profile Send private message
PostPosted: Fri Jul 25, 2008 9:28 pm Reply with quote
lenny
Valuable expert
Valuable expert
Joined: May 15, 2008
Posts: 275




I doubt you have permissions... If the target is on a shared server then you are unlikely to be able to breach the server security unless you can find a pre-compiled exploit or compile it yourself on an identical (or as close to identical as you can) platform.
View user's profile Send private message
PostPosted: Fri Jul 25, 2008 9:56 pm Reply with quote
badrh0
Active user
Active user
Joined: Jul 06, 2008
Posts: 32




lenny wrote:
I doubt you have permissions... If the target is on a shared server then you are unlikely to be able to breach the server security unless you can find a pre-compiled exploit or compile it yourself on an identical (or as close to identical as you can) platform.

Hi,
The server contains only two sites of the same organization.
Something strange happens each time I want to chmod my hello.pl/hello.c scripts, the dir in which they are included becomes unreadable for me !!!
View user's profile Send private message
mysql to gain root previleges
www.waraxe.us Forum Index -> Newbies corner
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.046 Seconds