03-23-2012, 10:25 PM
ohh ane ngerti :
Excellent, as we can see mysql server has two users without password. Next step is try to access the database using phpmyadmin (without credentials).
Using phpmyadmin web interface, we will try to find mysql’s datadir with the following sql query:
pakek phpmyadmin via browser wkwkw
pantes ga ada lagi nampak pakek sqlmap
mungkin di urlnya dibikin url/phpmyadmin,masih kurang jelas si
Excellent, as we can see mysql server has two users without password. Next step is try to access the database using phpmyadmin (without credentials).
Using phpmyadmin web interface, we will try to find mysql’s datadir with the following sql query:
pakek phpmyadmin via browser wkwkw
pantes ga ada lagi nampak pakek sqlmap
mungkin di urlnya dibikin url/phpmyadmin,masih kurang jelas si