> For the complete documentation index, see [llms.txt](https://kashz.gitbook.io/kashz-jewels/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kashz.gitbook.io/kashz-jewels/services/phpmyadmin.md).

# phpmyadmin

## Interesting Stuff

```
/etc/phpmyadmin/config-db.php
```

## LFI + phpinfo() exploit race-condition

REQUIREMENT: file\_uploads: ON

* <https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/File%20Inclusion/phpinfolfi.py>

```bash
# modify code
1. update payload
2. add cookie, session ID in request (LFI and payload)
3. update LFIREQ 
4. change `=>` to `=&gt`

python phpinfolfi.py IP PORT THREADS
```