Sql web shell upload

Discussion & Solutions
1

hello,

i am learning hacking with the support of 1hack forum thanks a lot. I have a problem. If i have access to my local server via sqlmap. able to dump database. But i unable to upload os shell/web shell becuase i have only user priv = usage, disable the others priv. i have found some hackers also upload webshell to server without file read/write priv. how can they do that. is any premade script on github or something else. it will be helpful to understand process. also it will be helpful to learn the hacking skills more.

2

hey perhaps this might help you.

https://null-byte.wonderhowto.com/how-to/use-sql-injection-run-os-commands-get-shell-0191405/

They seem to use reverse shell with netcat.

1 Like