PHP MyAdmin

[cool4dmin]

hello
I have an access on a database. there is another DB belong to PHP MyAdmin. but I can't find the path of PHP MyAdmin on my target domain. how do I find the path and how can I use from this access?

thanks

[pretentious]

I'm a little confused by your question but are you talking about the phpmyadmin control panel?

[cool4dmin]

exactly
I access on a DB through a sqli bug on the site. the current DB is belong to my site. and there is another DB named PHPMyAdmin that I can read the table content. how can I find the path of PHPMyAdmin on the site or server from content of this DB?

[tremor77]

Sounds like you're trying to union hack a database on a shared hosting server that doesn't actually belong to you. Not gonna help you with that one soz bro.

[cool4dmin]

I just asked this for educational purpose.

[tremor77]

I just asked this for educational purpose.

Much better

The path to phpMyAdmin is very often domain.com/phpMyAdmin (and case sensitive). However in many cases intelligent server administrators change this to any number of paths. Hackers often run script attacks on the website in order to locate the actual URL. Example from my own apache log - just this morning in fact - below.

Code: Select all

[Mon Mar 05 06:10:17 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/w00tw00t.at.blackhats.romanian.anti-sec:)
[Mon Mar 05 06:10:17 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/scripts
[Mon Mar 05 06:10:18 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/admin
[Mon Mar 05 06:10:19 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/admin
[Mon Mar 05 06:10:19 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/admin
[Mon Mar 05 06:10:20 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/db
[Mon Mar 05 06:10:21 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/dbadmin
[Mon Mar 05 06:10:21 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/myadmin
[Mon Mar 05 06:10:22 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysql
[Mon Mar 05 06:10:23 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysqladmin
[Mon Mar 05 06:10:23 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/typo3
[Mon Mar 05 06:10:24 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpadmin
[Mon Mar 05 06:10:24 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin
[Mon Mar 05 06:10:25 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmyadmin
[Mon Mar 05 06:10:26 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmyadmin1
[Mon Mar 05 06:10:26 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmyadmin2
[Mon Mar 05 06:10:27 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/pma
[Mon Mar 05 06:10:28 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/web
[Mon Mar 05 06:10:28 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/xampp
[Mon Mar 05 06:10:29 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/web
[Mon Mar 05 06:10:30 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/php-my-admin
[Mon Mar 05 06:10:30 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/websql
[Mon Mar 05 06:10:31 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmyadmin
[Mon Mar 05 06:10:32 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin
[Mon Mar 05 06:10:33 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2
[Mon Mar 05 06:10:33 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/php-my-admin
[Mon Mar 05 06:10:34 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.2.3
[Mon Mar 05 06:10:35 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.2.6
[Mon Mar 05 06:10:35 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.1
[Mon Mar 05 06:10:36 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.4
[Mon Mar 05 06:10:37 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.5-rc1
[Mon Mar 05 06:10:38 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.5-rc2
[Mon Mar 05 06:10:38 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.5
[Mon Mar 05 06:10:39 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.5-pl1
[Mon Mar 05 06:10:40 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.6-rc1
[Mon Mar 05 06:10:40 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.6-rc2
[Mon Mar 05 06:10:41 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.6
[Mon Mar 05 06:10:42 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.7
[Mon Mar 05 06:10:42 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.7-pl1
[Mon Mar 05 06:10:43 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-alpha
[Mon Mar 05 06:10:44 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-alpha2
[Mon Mar 05 06:10:45 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-beta1
[Mon Mar 05 06:10:45 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-beta2
[Mon Mar 05 06:10:46 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-rc1
[Mon Mar 05 06:10:47 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-rc2
[Mon Mar 05 06:10:47 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-rc3
[Mon Mar 05 06:10:48 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0
[Mon Mar 05 06:10:49 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-pl1
[Mon Mar 05 06:10:50 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-pl2
[Mon Mar 05 06:10:50 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-pl3
[Mon Mar 05 06:10:51 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-rc1
[Mon Mar 05 06:10:52 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-rc2
[Mon Mar 05 06:10:52 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1
[Mon Mar 05 06:10:53 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-pl1
[Mon Mar 05 06:10:54 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-pl2
[Mon Mar 05 06:10:54 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-pl3
[Mon Mar 05 06:10:55 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2-rc1
[Mon Mar 05 06:10:56 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2-beta1
[Mon Mar 05 06:10:57 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2-rc1
[Mon Mar 05 06:10:57 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2
[Mon Mar 05 06:10:58 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2-pl1
[Mon Mar 05 06:10:59 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.3
[Mon Mar 05 06:10:59 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.3-rc1
[Mon Mar 05 06:11:00 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.3
[Mon Mar 05 06:11:00 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.3-pl1
[Mon Mar 05 06:11:01 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-rc1
[Mon Mar 05 06:11:02 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-pl1
[Mon Mar 05 06:11:02 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-pl2
[Mon Mar 05 06:11:03 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-pl3
[Mon Mar 05 06:11:04 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-pl4
[Mon Mar 05 06:11:04 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4
[Mon Mar 05 06:11:05 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0-beta1
[Mon Mar 05 06:11:06 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0-rc1
[Mon Mar 05 06:11:06 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0-pl1
[Mon Mar 05 06:11:07 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0-pl2
[Mon Mar 05 06:11:08 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0
[Mon Mar 05 06:11:08 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0-beta1
[Mon Mar 05 06:11:09 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0-rc1
[Mon Mar 05 06:11:10 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0-rc2
[Mon Mar 05 06:11:10 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0
[Mon Mar 05 06:11:11 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0.1
[Mon Mar 05 06:11:12 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0.2
[Mon Mar 05 06:11:12 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0.3
[Mon Mar 05 06:11:13 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0.4
[Mon Mar 05 06:11:14 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.1-rc1
[Mon Mar 05 06:11:14 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.1
[Mon Mar 05 06:11:15 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.2
[Mon Mar 05 06:11:16 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/sqlmanager
[Mon Mar 05 06:11:16 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysqlmanager
[Mon Mar 05 06:11:17 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/p
[Mon Mar 05 06:11:17 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/PMA2005
[Mon Mar 05 06:11:18 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/pma2005
[Mon Mar 05 06:11:19 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmanager
[Mon Mar 05 06:11:19 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/php-myadmin
[Mon Mar 05 06:11:20 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmy-admin
[Mon Mar 05 06:11:21 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/webadmin
[Mon Mar 05 06:11:21 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/sqlweb
[Mon Mar 05 06:11:22 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/websql
[Mon Mar 05 06:11:23 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/webdb
[Mon Mar 05 06:11:23 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysqladmin
[Mon Mar 05 06:11:24 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysql-admin


Now a smarter admin would have mod_security of Fail2Ban installed... and as of this morning I actually did install Fail2Ban because I'm tired of my log files getting spammed. So you can attempt to try something like w00tw00t or not be a skiddie and write your own script... but then you also chance getting your ip blocked.