
š
#phpmyadmin #infosec #redteam
#CyberSecurity #BlueTeam #DatabaseSecurity #phpMyAdmin #HackTricks Post: phpmyadmin hacktricks
phpMyAdmin is one of the most attacked database interfaces on the web. Hereās what offensive testers look for ā and how to lock it down.
SELECT LOAD_FILE('/etc/passwd'); SELECT LOAD_FILE('/var/www/html/config.inc.php'); 4ļøā£ ā Bypass restrictions. phpmyadmin hacktricks
3ļøā£ ā Steal configs:
5ļøā£ (Whitelist bypass) ā Old versions still exist in the wild. phpmyadmin hacktricks
2ļøā£ ā If you have DB access: