Metasploit mailing list archives

SQL Injection with msf v3.1

From: patrick at aushack.com (Patrick Webster)
Date: Thu, 21 Feb 2008 01:53:22 +1100

Nope. Not really.

A lot of SQL injections are custom built, and there are *currently* no SQL
payloads. There are PHP remote file include handlers however...

I'd like to work on some xp_cmdshell payloads if anyone is interested.

Any ideas? I need to read up on the payload code :( but have some ideas.

-Patrick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20080221/344df65f/attachment.htm>

Current thread:

Doing a thesis regarding security Edouard Zorrilla (Feb 18)
- Doing a thesis regarding security Douglas F. Calvert (Feb 18)
  - Doing a thesis regarding security Daniel Guido (Feb 18)
    - Doing a thesis regarding security H D Moore (Feb 18)
  - Doing a thesis regarding security Edouard Zorrilla (Feb 19)
    - Doing a thesis regarding security H D Moore (Feb 19)
    - Doing a thesis regarding security Tim (Feb 19)
- <Possible follow-ups>
- Doing a thesis regarding security Simen Bjelke (Feb 19)
  - Doing a thesis regarding security Edouard Zorrilla (Feb 19)
  - SQL Injection with msf v3.1 Edouard Zorrilla (Feb 20)
    - SQL Injection with msf v3.1 Patrick Webster (Feb 20)
    - SQL Injection with msf v3.1 Fabrice MOURRON (Feb 20)
    - SQL Injection with msf v3.1 Edouard Zorrilla (Feb 20)
    - SQL Injection with msf v3.1 diaul (Feb 21)