Re: [sqlmap-users] Query Access Tables from MSysObjects

[Miroslav S. <mir...@gm...>]

ok.

we'll consider it. i'll do some testings in the "wild" to see what's
the percentage of those when get time.

if the percentage is "considerable" we can include it, for sure.

kr

On Mon, Feb 7, 2011 at 2:07 PM, Stiefenhofer, Marek
<M.S...@r-...> wrote:
> Hi all,
>
>
>
> in some rare cases default permissions on Access Databases have been
> modified, allowing at least read access for the default user to the system
> table: MSysObjects.
>
> In those cases it is easy to get the tablenames like that:
>
>
>
> SELECT MSysObjects.Name FROM MSysObjects WHERE MSysObjects.Type=1
>
>
>
> Is it worth to include this before the bruteforce tests that SQLmap is
> doing? Nevertheless there’s no way to enumerate column names…
>
>
>
> -marek
>
> ------------------------------------------------------------------------------
> The modern datacenter depends on network connectivity to access resources
> and provide services. The best practices for maximizing a physical server's
> connectivity to a physical network are well understood - see how these
> rules translate into the virtual world?
> http://p.sf.net/sfu/oracle-sfdevnlfb
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
Alternate: miroslav.stampar (at) mail.ru
PGP Key ID: 0xB5397B1B
Location: Zagreb, Croatia