bjk5739/mlf-phpinject repository overview

To run this image, first pull using the pull command provided by DockerHub. Then run the following:

docker run -p 8080:80 -d bjk5739/mlf-phpinject

This command should return a string of characters.

Before you continue, you need to start the MySQL service and change the root password (through shell):

docker exec -it <first 3 chars of string from previous step> /bin/bash

Once in the shell:

# service mysql start
# mysql -u root
mysql> ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'newpasswordhere';
mysql> FLUSH PRIVILEGES;
mysql> quit;

Open a browser, and visit:

http://localhost:8080/install

It should redirect you to:

http://localhost:8080/install/index.php

From here, you can enter in database/admin details, and exploit the PHP Code Injection vulnerability in the "Database Name" field. Refer to this link for attack details: https://www.exploit-db.com/exploits/40021⁠