hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

||SysTeM||
Have been delving into sql lately, and was curious if its possible to spawn a shell with commands alone? I know about the directory traversal exploit with unicode characters, but was looking for something more "legit".

I've heard that its possible to make a sql script, and then execute that to spawn a shell, any ideas on that? Examples? Possible?

Tia
jockel
http://www.pstruh.cz/tips/detpg_cmdshell.htm
||SysTeM||
QUOTE (jockel @ Aug 21 2004, 05:47 PM)
http://www.pstruh.cz/tips/detpg_cmdshell.htm

perfect, thanks much!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.