Kabron Posted October 22, 2011 Report Share Posted October 22, 2011 Defcon 17: Advanced Mysql ExploitationDescription: his talk focuses on how MySQL SQL injection vulnerabilities can be used to gain remote code execution on the LAMP and WAMP environments. Attackers performing SQL injection on a MySQL platform must deal with several limitations and constraints. For example, the lack of multiple statements...read more in one query makes MySQL an unpopular platform for remote code execution compared to other platforms. This talk will show that arbitrary code execution is possible on the MySQL platform and explain the techniques. In this presentation, the author will release a new tool titled MySqloit. This tool can be integrated with metasploit and is able to upload and execute shellcodes using a SQL Injection vulnerability in LAMP or WAMP environments. 1 Quote Link to comment Share on other sites More sharing options...
rimoboy Posted November 6, 2014 Report Share Posted November 6, 2014 THANK Quote Link to comment Share on other sites More sharing options...
