RE: Blind SQL Injection / Stored procedures

["Evans, Arian" <Arian.Evans () fishnetsecurity com>]

Fancois, nice explanation,

> -----Original Message-----
> From: LAROUCHE Francois [mailto:Francois.Larouche () accorservices com] 
> Sent: Thursday, November 17, 2005 8:59 AM
[...]
> d) If you still can't well sorry... I think there is no other 
> way except those already mentioned by the others (by the way 
> to execute xp_makewebtask you need to have high user 
> privileges something you are obviously not)

Has anyone published a complete list/table of MSSQL (and other DB)
stored procs/pls on the web, and what the default privs to them are?

I've made one but I'm not sure yet if I'm allowed to publish it.

This would be a nice handy sql-injection reference table for
people who are new to SQLi with stored procs, or just have a
bad memory/aren't very smart [me].

-ae