Re: [sqlmap-users] Query Access Tables from MSysObjects

[Miroslav S. <mir...@gm...>]

we'll try to implement it in next few days

kr

On Mon, Feb 7, 2011 at 2:07 PM, Stiefenhofer, Marek
<M.S...@r-...> wrote:
> Hi all,
>
>
>
> in some rare cases default permissions on Access Databases have been
> modified, allowing at least read access for the default user to the system
> table: MSysObjects.
>
> In those cases it is easy to get the tablenames like that:
>
>
>
> SELECT MSysObjects.Name FROM MSysObjects WHERE MSysObjects.Type=1
>
>
>
> Is it worth to include this before the bruteforce tests that SQLmap is
> doing? Nevertheless there’s no way to enumerate column names…
>
>
>
> -marek
>
> ------------------------------------------------------------------------------
> The modern datacenter depends on network connectivity to access resources
> and provide services. The best practices for maximizing a physical server's
> connectivity to a physical network are well understood - see how these
> rules translate into the virtual world?
> http://p.sf.net/sfu/oracle-sfdevnlfb
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
Alternate: miroslav.stampar (at) mail.ru
PGP Key ID: 0xB5397B1B
Location: Zagreb, Croatia