[sqlmap-users] Query Access Tables from MSysObjects

[Stiefenhofer, M. <M.S...@r-...>]

Hi all,

 

in some rare cases default permissions on Access Databases have been
modified, allowing at least read access for the default user to the
system table: MSysObjects.

In those cases it is easy to get the tablenames like that: 

 

SELECT MSysObjects.Name FROM MSysObjects WHERE MSysObjects.Type=1

 

Is it worth to include this before the bruteforce tests that SQLmap is
doing? Nevertheless there's no way to enumerate column names...

 

-marek