MS Access SQL injection column enumeration

From: RaMatkal x2 (ramatkal_at_hotmail.com)
Date: 03/19/05

  • Next message: Josh Zlatin-Amishav: "RE: Automated website mapping with Google" 
    To: pen-test@securityfocus.com
Date: Sat, 19 Mar 2005 20:29:59 +0000

    I am conducting a pen-test on a web app that is vulnerable to SQL injection.
    The backend database is MS access.....

    i have managed to get a list of table names using something like the
    following:

    select Name, from MSysObjects
    where Type=1
      and Name not like "MSys*";

    However, I am struggling to find a way to gather a list of column names from
    each table which
    would allow me to read any data from the database......
    None of the sql injection papers / tutorials seem to have much to say about
    Access databases...

    Anybody got any ideas?

    Thanks in advance...
    ramatkal@hotmail.com

    _________________________________________________________________
    FREE pop-up blocking with the new MSN Toolbar – get it now!
    http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

  • Next message: Josh Zlatin-Amishav: "RE: Automated website mapping with Google"

    Relevant Pages

    • [Full-disclosure] MS Access SQL injection column enumeration
      ... I am conducting a pen-test on a web app that is vulnerable to SQL injection. ... The backend database is MS access..... ...
      (Full-Disclosure)
    • MS Access SQL injection column enumeration
      ... I am conducting a pen-test on a web app that is vulnerable to SQL injection. ... The backend database is MS access..... ...
      (Security-Basics)
    • RE: Pen-testing AS400 DB2 LANSA
      ... We did a pen-test on a web application a while ago that used DB2 on ... AS400 as backend database. ... Subject: Pen-testing AS400 DB2 LANSA ... anyone have any knowledge on SQL injection for a AS400 running DB2? ...
      (Pen-Test)
    • JSP and SQL Injection
      ... Was wondering if SQL Injection will work on the web app using JSP. ... I remember faintly that Java has some inbuilt checks on query break but not too sure, is there any way to bypass that? ...
      (Pen-Test)