( ~~~ )
  ))^ ^((
 ((* - *))
   _) (_
 / '--' \     ^
//(_  _)\\   /_\
\\ )__( //   .'
 (( v  ))   (
   \| /\     '-.
    K(  \       )
    |\\  '-._.-'
    ||\\
  *_-P/,P
     '-
Want your PHP application manually audited? Check out Xxor AB's PHP Security Auditing Service

Saturday, July 9, 2011

phpMyAdmin 3.x Swekey RCI Exploit

Someone else submitted a working python exploit to exploit-db. It's already out there so I might as well publish my original exploit written in PHP.
2011-07-20 - Fixed some bugs in the exploit.

Download here

22 comments:

  1. hey nyc bro i want to learn how to find vulnerabilities in phpmyadmin i know sql injection but tht has nothing to do with this thing can u please guide me wht things to check in phpmyadmin to see if it has a hole or not

    ReplyDelete
  2. Hello I downloaded this exploit but i cant find the place where i should writ url can anybody help me

    ReplyDelete
  3. @Grish
    Uhm, what have you tried so far?

    ReplyDelete
  4. I tried to use thie exploit but dont now wehre i will write the Victims address can you help me
    I put php file into local server (denwer) then opend it in browser but i recive the folowing
    [!] Fatal error. Need cURL! [*] Exiting...
    (Sorry for mistakes English isn't my native language;)

    ReplyDelete
  5. @Grish
    Your server does not have cURL.

    ReplyDelete
  6. PHP Notice: Undefined offset: 1 in C:\xampp\php\tttt.php on line 92



    // Extract cookie
    preg_match('/phpMyAdmin=([^;]+)/', $result, $matches);
    $cookie = $matches[1];
    output("[i] Cookie:".$cookie);
    // Extract token
    preg_match('/(token=|token" value=")([0-9a-f]{32})/', $result, $matches);
    $token = $matches[2];
    output("[i] Token:".$token);

    ReplyDelete
  7. http://HOST/setup/index.php always is bloqued by a login (htaccess style)?

    ReplyDelete
  8. This type of message always inspiring and I prefer to read quality content, so happy to find good place to many here in the post, the writing is just great, thanks for the post. Hypnoterapi

    ReplyDelete
  9. Hello I downloaded this exploit but i cant find the place where i should writ url can anybody help meRabattkoder Cdon

    ReplyDelete
  10. Are you also searching for spanish nursing writing services we are the best solution for you. We are best known for delivering the best services to students.  

    ReplyDelete
  11. In our online Assignment Help services, we only outsource subject matter professionals for the work. It is both their knowledge and skills in picking the unique words to write the paper that satisfies the needs for help with assignment writing. But, the assignment helpers from our online assignment help services follow the needed process to create the best assignment help paper. Have a glance to understand why our best assignment help service is the right. We can provide you the ideal assignment help service that can help boost your overall scores. Get the right assignment writing service at reasonable rate.

    ReplyDelete
  12. Peruse a great many profiles of Russian and Indian possible delightful all young ladies and prepare to relate with your life match! What are you hanging tight for? Your ideal match might be only a couple clicks away. Visit with excellent Call Girls in Delhi Excellent Ladies data set comprises of thousands of Russian and Indian ladies looking for genuine affection and companionship. With the help of inventive administrations, Instant Messaging, Live Video Streaming and Live Chat, individual dating and serious gathering.
    The nightlife of Delhi generally is connecting with and great in view of the presence of club, bars, and cafés. Get-togethers are dependably encouraged in these spots to value the nightlife. You can enlist amazingly wonderful Escort Service in Delhi as a date or for a lengthy drive with your preferred woman. Investigate the display to see photographs of Delhi Call Girls for time pass and fun activities to be viable with you.

    ReplyDelete
  13. Escort Service in Mahipalpur, on the brink of IGI Airport, Delhi, Foreigner Escorts, Russian Call Girls in Mahipalpur, New Delhi,
    You think that it’s qualified to pay one of the Call Girls in Mahipalpur and get yourself far from the negative energies of dejection and disappointment that rises out of a similar forlornness. Regardless of whether you are a first time guest or a customary guest of this little yet intriguing spot, it is consistently prepared to astonish you through the energetic presence of so youthful and adorable accomplices.
    Decision is forever yours. You better know your requirements. Pick the best Call Girls in Mahipalpur whom you track down the best from the accessible paid accomplices. All are exquisite and love to cater regarded customers with their awesome close administrations that fulfill each personal need of yours and make you a fulfilled man. It is truly significant for you to be upbeat and fulfilled in any case forlornness will take you towards unmanageable power of disappointment and gloom.

    ReplyDelete
  14. Welcome to Delhi's ideal escorts organization who are serving the sexual delight from the most recent five years. We have the Exceptional call girls in Connaught place to make all your desires total. You will feel profoundly self-inspired with our upscale and hot escorts who make your fantasy full fill. We have the Independent CP Call Girls and furthermore Escorts in Connaught Place for demonstrating you the sexual happiness.
    The greater part of individuals think what is the significant job of Escort Service in Connaught place in their life. It isn't about the job it is about how they making life more solid by making dreams valid. Each individual arrangement has the necessity of ladies, regardless of whether it will be an individual and expert prerequisite. For pleasurable exercises and expert front, it is smarter to employ an escort.
    In this manner, on the off chance that you are presently in CP or arranging an excursion here,

    ReplyDelete
  15. Call girls in Paharganj is most popular for its modest inns, facilities, lodges, cafés and so on one of the greatest market region in Delhi where you are to discover everything without exception. On the off chance that you are pondering about the escort administrations, Paharganj accompanies are known to be the awesome. Escort Service in Paharganj gives you an exceptional pleasure and you will discover them in different regions of Delhi. The Paharganj escort administration gives bundles as per your requirements. You can benefit the bundles that they give by paying appropriately. The sum that you need to pay to benefit these administrations are very little and effectively reasonable.
    The tall, attractive and evil ladies who have the appeal to make you slobber over their body and fall head over heels in love for them at the absolute first sight are the female Escorts Service in Paharganj Delhi. These ladies will make you look for additional as they do something amazing into your body, psyche and soul.

    ReplyDelete
  16. Call Girl in Delhi is basically becoming extremely popular in India day by day. But there are numerous problems related to this profession that you simply are really likely to explore beforehand before you really avail any of escort services. Rather most of them are able to cheat and deceive you in how or other. this is often the rationale it's always important for you discover an honest and reliable escort service. Delhi Escorts is understood to be the simplest choice for you any day. you're given the simplest escort service once you plan to choose these amazing Escort service in Delhi. All of the policies and ethics of those call girls are completely customers oriented. The Independent Delhi Escorts understand on how important it's to satisfy your physical and mental needs. Hence, they always look out of your needs with utmost care.

    ReplyDelete
  17. Right now, several people aren't proud of their sexual love also as their sexual life. And for that reason, they're developing the symptoms of frustration, anxiety, depression well as agony. So, if you're one among them, you'll come to our Escort service in Pitampura and that they will kick out of these issues for your life. If you spend time with our Independent Escorts Pitampura Delhi, you'll forget all the sadness of your life and can become happy again. So, if you're in Pitampura, we are here to assist you. Our escorts are very hooked in to their work. When it involves passion, there are not any other escorts who are as passionate as our Call girls in Pitampura. they're so passionate that, they will attend any extent to satisfy all of your sexual fetishes and fantasies and are always able to walk some extra steps for the sake of your happiness and satisfaction.

    ReplyDelete
  18. I like the helpful information you provide in your articles. I’ll bookmark your blog and check again here regularly. write my essay

    ReplyDelete