Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MySQL 无法使用反弹 Shell 功能 #72

Open
Co1t5f0ot opened this issue Jan 23, 2024 · 1 comment
Open

MySQL 无法使用反弹 Shell 功能 #72

Co1t5f0ot opened this issue Jan 23, 2024 · 1 comment
Labels
bug Something isn't working

Comments

@Co1t5f0ot
Copy link

Co1t5f0ot commented Jan 23, 2024

系统环境

  • OS: [Win 11]
  • JavaVersion [8]

软件版本

  • Version [2.1.1]

Bug 详细描述

远程连接 Windows 和 linux 上的 mysql 数据库,并 udf 提权成功,但是使用反弹 shell 功能报错
image
image

@Co1t5f0ot Co1t5f0ot added the bug Something isn't working label Jan 23, 2024
@RobinOperation
Copy link

原因是这样: MySQL 和 DLL 文件的架构不一致(如 x86 或 x64)。如果 MySQL 是 64 位版本,但插件文件是 32 位,会导致加载失败。反弹shell时生成的.temp文件(本质上是DLL文件)是32位版本的,但是MySQL是64位版本的,加载不了。
1734845161979
1734845189338

我只查出了原因,要改这个工具的源码,让它反弹shell的时候编译成64位架构的DLL文件

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants