Re: PENTEST MySQL on windows

From: Tim (tim-pentest_at_sentinelchicken.org)
Date: 02/25/05

  • Next message: Chris: "Re: Traceroute" 
    Date: Thu, 24 Feb 2005 22:44:36 -0500
To: Anthony Ruso <aruso@lgit.com>

    > Doing a pentest on a site hosting a vulnerable verion of MySQL on a
    > Windows box. I was able to get full access to the DB and export ALL the
    > data. Anyone have any ideas on jumping to the Windows OS with full
    > access to Just the DB.

    I don't know if you are familiar with this, but MySQL supports a SELECT
    syntax called OUTFILE that allows you to write output of a query to a
    file. See:
      http://dev.mysql.com/doc/mysql/en/select.html

    This syntax is pretty limited, and the permission to do this can be
    turned off, but if you have the right privs, and can craft a batch
    script, and put it in the right place on the filesystem, perhaps it will
    help.

    good luck,
    tim

  • Next message: Chris: "Re: Traceroute"

    Relevant Pages

    • Re: PENTEST MySQL on windows
      ... > Doing a pentest on a site hosting a vulnerable verion of MySQL on a ... Anyone have any ideas on jumping to the Windows OS with full ... If the MySQL server is vulnerable, you could try using stored procedures & ... listing of the current working directory of the SQL Server process. ...
      (Pen-Test)
    • PENTEST MySQL on windows
      ... Doing a pentest on a site hosting a vulnerable verion of MySQL on a ... Anyone have any ideas on jumping to the Windows OS with full ...
      (Pen-Test)
    • Re: free database server for desktop application with ado.net driv
      ... I've used MySQL on Windows since its 3.x days, ... So what if it is GNU and supports linux? ... You're missing the point - you do not have to compile it yourself. ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: Problem with bind_param using DBD::mysql
      ... I didn't realise that windows doesn't have LONG LONG. ... syntax; check the manual that corresponds to your MySQL server version ... Failed 3/113 tests, 97.35% okay ...
      (perl.dbi.users)