 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 173
 Members: 0
 Total: 173
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Writing backdoor into files without single quotes[Resolved] |
|
 Posted: Sat Jun 28, 2008 9:22 am |
 |
|
| black-flag |
| Regular user |
 |
|
| Joined: Jun 28, 2008 |
| Posts: 8 |
|
|
|
 |
|
 |
|
Greeting
Via SQLinjection I looking to write a backdoor into file but without quotes
i have tested
but does not work ???
do you have any idea about this problem ?
thank you |
|
Last edited by black-flag on Sun Jun 29, 2008 11:51 pm; edited 1 time in total |
|
|
|
| Posted: Sat Jun 28, 2008 10:17 am |
|
|
| pexli |
| Valuable expert |
 |
|
| Joined: May 24, 2007 |
| Posts: 665 |
| Location: Bulgaria |
|
|
|
|
|
|
| Maybe you don't have file privileges. |
|
|
|
|
|
?? |
|
| Posted: Sat Jun 28, 2008 10:37 am |
|
|
| black-flag |
| Regular user |
|
|
| Joined: Jun 28, 2008 |
| Posts: 8 |
|
|
|
|
|
|
|
hi
but does not work in my computer when i simuling the case (i have all privileges). ?? |
|
|
|
|
|
Re: Writing backdoor into files without single quotes |
|
| Posted: Sat Jun 28, 2008 5:51 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| black-flag wrote: | Greeting
Via SQLinjection I looking to write a backdoor into file but without quotes
i have tested
but does not work ???
do you have any idea about this problem ?
thank you |
Simple answer - you probably can't. "INTO OUTFILE" needs output filename as single-quoted string. No CONCAT() or or other tricks. And if "magic_quotes=on", then "INTO OUTFILE" method is useless in most cases. |
|
|
|
|
| Posted: Thu Sep 10, 2009 6:54 am |
|
|
| Yunice09 |
| Beginner |
|
|
| Joined: Sep 10, 2009 |
| Posts: 1 |
|
|
|
|
|
|
|
I just wanna say thank you for the information that you have been shared. I am glad that I have read your post.
__________________
Freelance writing jobs |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
