Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Linux Hacking Case Studies Part 3: phpMyAdmin

netspi.com | blog | #linux | #privilege-escalation | #pentest | #mysql | #webshell | #phpmyadmin

Summary

Walks through attacking insecure phpMyAdmin installs: finding exposed instances, dictionary-attacking weak passwords, uploading webshells, then pivoting to world-writable cron scripts for escalation.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Linux Hacking Case Studies Part 5: Building a Vulnerable Linux Server
The final Linux case studies post builds a vulnerable Kali lab server, recreating the Rsync, NFS, phpMyAdmin, and sudo misconfiguration scenarios from the series for safe hands-on practice at home.
blog · netspi.com
Linux Hacking Case Studies Part 4: Sudo Horror Stories
This Linux case study covers finding SSH servers, running dictionary attacks against weak passwords, then abusing overly permissive sudo rules on sh, vi, python, and nmap to escape to a root shell.
blog · netspi.com
Linux Hacking Case Studies Part 2: NFS
Attacks misconfigured NFS exports: enumerating and mounting shares, spoofing UIDs to read protected files, and hunting setuid binaries to reach root, with a note on root squashing.
blog · netspi.com
Linux Hacking Case Studies Part 1: Rsync
The first Linux case study targets insecure Rsync servers: enumerating shares on port 873, grabbing sensitive files, and creating a privileged user via shadow edits when the daemon runs as root.
blog · netspi.com
Attacking Restricted Linux Shells
Shows how to escape restricted chroot shells that grant root: find a writable-executable file, then use the classic breakout via echo and a saved directory file descriptor.
blog · projectzero.google
Exploiting Recursion in the Linux Kernel
A report on an arbitrary recursion bug in the Linux kernel, triggerable by a local user on Ubuntu systems installed with home directory encryption support, with exploit code published.
back