Learn Security Online
[Advertise With HackThisSite.org]

Hack This Site - Forums Index

PHP MyAdmin

Discuss the many weaknesses of browser security and ways to mitigate the threat
Post a reply

PHP MyAdmin

Post by cool4dmin on Mon Mar 05, 2012 3:50 am
([msg=64743]see PHP MyAdmin[/msg])

hello
I have an access on a database. there is another DB belong to PHP MyAdmin. but I can't find the path of PHP MyAdmin on my target domain. how do I find the path and how can I use from this access?

thanks
cool4dmin
New User
New User
 
Posts: 11
Joined: Wed Sep 21, 2011 8:40 am
Blog: View Blog (0)

Re: PHP MyAdmin

Post by pretentious on Mon Mar 05, 2012 7:50 am
([msg=64744]see Re: PHP MyAdmin[/msg])

I'm a little confused by your question but are you talking about the phpmyadmin control panel?
Goatboy wrote:Oh, that's simple. All you need to do is dedicate many years of your life to studying security.

IF you feel like exchanging ASCII arrays, let me know ;)
My crime is that of outsmarting you, something that you will never forgive me for.
Damn kid.
User avatar
pretentious
Poster
Poster
 
Posts: 332
Joined: Wed Mar 03, 2010 12:48 am
Blog: View Blog (0)

Re: PHPMyAdmin

Post by cool4dmin on Mon Mar 05, 2012 8:45 am
([msg=64747]see Re: PHPMyAdmin[/msg])

exactly :lol:
I access on a DB through a sqli bug on the site. the current DB is belong to my site. and there is another DB named PHPMyAdmin that I can read the table content. how can I find the path of PHPMyAdmin on the site or server from content of this DB?
cool4dmin
New User
New User
 
Posts: 11
Joined: Wed Sep 21, 2011 8:40 am
Blog: View Blog (0)

Re: PHP MyAdmin

Post by tremor77 on Mon Mar 05, 2012 9:25 am
([msg=64749]see Re: PHP MyAdmin[/msg])

Sounds like you're trying to union hack a database on a shared hosting server that doesn't actually belong to you. Not gonna help you with that one soz bro.
Image
User avatar
tremor77
Moderator
Moderator
 
Posts: 780
Joined: Wed Mar 31, 2010 12:00 pm
Location: New York
Blog: View Blog (0)

Re: PHPMyAdmin

Post by cool4dmin on Mon Mar 05, 2012 9:56 am
([msg=64754]see Re: PHPMyAdmin[/msg])

I just asked this for educational purpose.
cool4dmin
New User
New User
 
Posts: 11
Joined: Wed Sep 21, 2011 8:40 am
Blog: View Blog (0)

Re: PHPMyAdmin

Post by tremor77 on Mon Mar 05, 2012 10:30 am
([msg=64755]see Re: PHPMyAdmin[/msg])

cool4dmin wrote:I just asked this for educational purpose.


Much better :)

The path to phpMyAdmin is very often domain.com/phpMyAdmin (and case sensitive). However in many cases intelligent server administrators change this to any number of paths. Hackers often run script attacks on the website in order to locate the actual URL. Example from my own apache log - just this morning in fact - below.

Code: Select all
[Mon Mar 05 06:10:17 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/w00tw00t.at.blackhats.romanian.anti-sec:)
[Mon Mar 05 06:10:17 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/scripts
[Mon Mar 05 06:10:18 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/admin
[Mon Mar 05 06:10:19 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/admin
[Mon Mar 05 06:10:19 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/admin
[Mon Mar 05 06:10:20 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/db
[Mon Mar 05 06:10:21 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/dbadmin
[Mon Mar 05 06:10:21 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/myadmin
[Mon Mar 05 06:10:22 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysql
[Mon Mar 05 06:10:23 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysqladmin
[Mon Mar 05 06:10:23 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/typo3
[Mon Mar 05 06:10:24 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpadmin
[Mon Mar 05 06:10:24 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin
[Mon Mar 05 06:10:25 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmyadmin
[Mon Mar 05 06:10:26 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmyadmin1
[Mon Mar 05 06:10:26 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmyadmin2
[Mon Mar 05 06:10:27 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/pma
[Mon Mar 05 06:10:28 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/web
[Mon Mar 05 06:10:28 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/xampp
[Mon Mar 05 06:10:29 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/web
[Mon Mar 05 06:10:30 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/php-my-admin
[Mon Mar 05 06:10:30 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/websql
[Mon Mar 05 06:10:31 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmyadmin
[Mon Mar 05 06:10:32 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin
[Mon Mar 05 06:10:33 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2
[Mon Mar 05 06:10:33 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/php-my-admin
[Mon Mar 05 06:10:34 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.2.3
[Mon Mar 05 06:10:35 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.2.6
[Mon Mar 05 06:10:35 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.1
[Mon Mar 05 06:10:36 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.4
[Mon Mar 05 06:10:37 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.5-rc1
[Mon Mar 05 06:10:38 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.5-rc2
[Mon Mar 05 06:10:38 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.5
[Mon Mar 05 06:10:39 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.5-pl1
[Mon Mar 05 06:10:40 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.6-rc1
[Mon Mar 05 06:10:40 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.6-rc2
[Mon Mar 05 06:10:41 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.6
[Mon Mar 05 06:10:42 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.7
[Mon Mar 05 06:10:42 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.5.7-pl1
[Mon Mar 05 06:10:43 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-alpha
[Mon Mar 05 06:10:44 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-alpha2
[Mon Mar 05 06:10:45 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-beta1
[Mon Mar 05 06:10:45 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-beta2
[Mon Mar 05 06:10:46 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-rc1
[Mon Mar 05 06:10:47 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-rc2
[Mon Mar 05 06:10:47 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-rc3
[Mon Mar 05 06:10:48 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0
[Mon Mar 05 06:10:49 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-pl1
[Mon Mar 05 06:10:50 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-pl2
[Mon Mar 05 06:10:50 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.0-pl3
[Mon Mar 05 06:10:51 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-rc1
[Mon Mar 05 06:10:52 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-rc2
[Mon Mar 05 06:10:52 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1
[Mon Mar 05 06:10:53 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-pl1
[Mon Mar 05 06:10:54 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-pl2
[Mon Mar 05 06:10:54 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.1-pl3
[Mon Mar 05 06:10:55 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2-rc1
[Mon Mar 05 06:10:56 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2-beta1
[Mon Mar 05 06:10:57 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2-rc1
[Mon Mar 05 06:10:57 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2
[Mon Mar 05 06:10:58 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.2-pl1
[Mon Mar 05 06:10:59 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.3
[Mon Mar 05 06:10:59 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.3-rc1
[Mon Mar 05 06:11:00 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.3
[Mon Mar 05 06:11:00 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.3-pl1
[Mon Mar 05 06:11:01 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-rc1
[Mon Mar 05 06:11:02 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-pl1
[Mon Mar 05 06:11:02 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-pl2
[Mon Mar 05 06:11:03 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-pl3
[Mon Mar 05 06:11:04 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4-pl4
[Mon Mar 05 06:11:04 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.6.4
[Mon Mar 05 06:11:05 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0-beta1
[Mon Mar 05 06:11:06 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0-rc1
[Mon Mar 05 06:11:06 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0-pl1
[Mon Mar 05 06:11:07 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0-pl2
[Mon Mar 05 06:11:08 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.7.0
[Mon Mar 05 06:11:08 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0-beta1
[Mon Mar 05 06:11:09 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0-rc1
[Mon Mar 05 06:11:10 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0-rc2
[Mon Mar 05 06:11:10 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0
[Mon Mar 05 06:11:11 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0.1
[Mon Mar 05 06:11:12 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0.2
[Mon Mar 05 06:11:12 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0.3
[Mon Mar 05 06:11:13 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.0.4
[Mon Mar 05 06:11:14 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.1-rc1
[Mon Mar 05 06:11:14 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.1
[Mon Mar 05 06:11:15 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpMyAdmin-2.8.2
[Mon Mar 05 06:11:16 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/sqlmanager
[Mon Mar 05 06:11:16 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysqlmanager
[Mon Mar 05 06:11:17 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/p
[Mon Mar 05 06:11:17 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/PMA2005
[Mon Mar 05 06:11:18 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/pma2005
[Mon Mar 05 06:11:19 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmanager
[Mon Mar 05 06:11:19 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/php-myadmin
[Mon Mar 05 06:11:20 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/phpmy-admin
[Mon Mar 05 06:11:21 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/webadmin
[Mon Mar 05 06:11:21 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/sqlweb
[Mon Mar 05 06:11:22 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/websql
[Mon Mar 05 06:11:23 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/webdb
[Mon Mar 05 06:11:23 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysqladmin
[Mon Mar 05 06:11:24 2012] [error] [client 221.226.*.**] File does not exist: /home/mysite/public_html/mysql-admin


Now a smarter admin would have mod_security of Fail2Ban installed... and as of this morning I actually did install Fail2Ban because I'm tired of my log files getting spammed. So you can attempt to try something like w00tw00t or not be a skiddie and write your own script... but then you also chance getting your ip blocked.
Image
User avatar
tremor77
Moderator
Moderator
 
Posts: 780
Joined: Wed Mar 31, 2010 12:00 pm
Location: New York
Blog: View Blog (0)
Post a reply

Return to Web

Who is online

Users browsing this forum: No registered users and 0 guests

Disclaimer :
HackThisSite does not support illegal activities.
The management of this board is not responsible for the content of any external internet sites.
Powered by phpBB © 2000-2009 phpBB Group
Carbon Style By Echo -=Designs By Echo=- © 2007 Echo
Administration Control Panel