Metasploit mailing list archives
using Meterpreter , out of MSF // SQL Injection module
From: grutz at jingojango.net (Kurt Grutzmacher)
Date: Thu, 27 Oct 2005 11:17:19 -0500
On Thu, Oct 27, 2005 at 02:10:24PM +0200, RaMatkal wrote:
I have written a perl script which i regularly use that exploits sites vulnerable to SQL injection running MSSQL.... It enumerates the database and is able to write the first 'x' rows of each table into .csv files.... Never thought about integrating it into metasploit though.... Let me know if anyone is interested in this...
Absinthe does this fairly well and for multiple databases. But it's not a perl script... :) http://www.0x90.org/releases/absinthe/ -- ..:[ grutz at jingojango dot net ]:.. GPG fingerprint: 5FD6 A27D 63DB 3319 140F B3FB EC95 2A03 8CB3 ECB4 "There's just no amusing way to say, 'I have a CISSP'."
Current thread:
- using Meterpreter , out of MSF // SQL Injection module, (continued)
- using Meterpreter , out of MSF // SQL Injection module str0ke (Oct 25)
- using Meterpreter , out of MSF // SQL Injection module mmiller at hick.org (Oct 25)
- using Meterpreter , out of MSF // SQL Injection module H D Moore (Oct 25)
- using Meterpreter , out of MSF Hamid . K (Oct 26)
- using Meterpreter , out of MSF // SQL Injection module RaMatkal (Oct 27)
- using Meterpreter , out of MSF // SQL Injection module Jerome Athias (Oct 27)
- using Meterpreter , out of MSF // SQL Injection module news-letters (Oct 27)
- using Meterpreter , out of MSF // SQL Injection module mmiller at hick.org (Oct 27)
- using Meterpreter , out of MSF // SQL Injection module Fabrice MOURRON (Oct 27)
- using Meterpreter , out of MSF // SQL Injection module Andre Ludwig (Oct 27)
- using Meterpreter , out of MSF // SQL Injection module Kurt Grutzmacher (Oct 27)
- using Meterpreter , out of MSF // SQL Injection module jasf (Oct 27)
- using Meterpreter , out of MSF // SQL Injection module Hamid . K (Oct 28)