https://www.youtube.com/watch?v=sGKFBTS_M3o

Details

Hi guys,

I made a video detailing the exploitation of a blind SQL injection in a PHP based website and how an attacker can use it to gain access to the administration pages. Then, using this access, the attacker will be able to gain code execution on the server by using a configuration issue.


What you will learn?

=> Blind SQL injection exploitation using time-based exploitation
=> Hiding Webshell Backdoor Code in Image Files
=> Gaining code execution using a PHP webshell


Full Blogpost here : http://rotimiakinyele.com/from-sql-injection-to-shell-ii-detailed-walkthrough.jsp