Linux Security Web And Vulnerability

Greetings all ....
for those who already know this trick, i am sorry ...
there may be some colleagues - colleagues who do not know ...

PhpMyAdmin should be protected with a password, but still there are some web leave the default (no password), n we can use ...

Here I will show you how to upload shell on the localhost
we will create a form called form.php n upload a file called upload.php that allows you to upload a shell we will ....

First we must know the path of its document root
Picture 1


then we go into phpmyadmin to create a database
Picture 2.


the picture above we create a database called the shell in the text box "Create new database". After that, select the database called the shell n select the SQL tab, and enter the SQL Comment. Command below will create a table called the form and will create a file called form.php on DOCUMENT ROOT, in which the file will contain the html codes.
Like Picture 3


and if no errors will successfully create a file called form.php in the DOCUMENT ROOT
Picture 4.


Once we make these forms, then we must create a file uploader ....
Command below will create a table called upload and will create a file called upload.php in the DOCUMENT ROOT, in which the file will contain the form php codes
like Picture 5


and if no errors will successfully create a file called upload.php in the DOCUMENT ROOT
Picture 6.


After sekses, we lived was called form.php file there DOCUMENT ROOT, and the example is http://localhost/form.php
Picture 7.


We live to upload a shell to be placed on the web, for example, I will upload a shell, and if successful, would bring a blank page and the URL that points to a file called "upload.php". on my localhost pointing to http://localhost/upload.php
Like Picture 8.


This is an example of fruitful shell uplaod to my localhost server ..
Picture 9.


for his script and shell please download at
http://www.ziddu.com/download/8112213/upload_shell_on_phpmyadmin.zip.html
so first apologize if there are errors
Please corrected
Thanks