Advanced MySQL Exploitation

[Nytro]

Advanced MySQL Exploitation

Author: Muhaimin Dzulfakar

Contents
1 Abstract...........................................................................................................................................3
2 Introduction ...................................................................................................................................3
3 Stacked Query................................................................................................................................3
4 Attacking MySQL on applications that do support stacked queries...............................................4
5 Attacking MySQL on applications that do not support stacked queries........................................5
6 Fingerprinting the web server directory.........................................................................................7
6.1 Fingerprint through error message method................................................................................7
6.2 Fingerprint through LOAD_FILE method......................................................................................7
7 Maximum size of arbitrary code allowed........................................................................................7
8 Arbitrary file compression/decompression ....................................................................................8
9 Dealing with columns......................................................................................................................8
10 Remote code execution on LAMP.................................................................................................9
11 Remote code execution on WAMP.............................................................................................10
References .......................................................................................................................................11

Download:

http://www.exploit-db.com/download_pdf/15956

Vedeti referintele.

[denjacker]

http://www.youtube.com/watch?v=5pSsLnNJIa4&feature=player_embedded#!