Re: [sqlmap-users] Query Access Tables from MSysObjects

[Miroslav S. <mir...@gm...>]

just to warn you all.

it will try to enumerate tables by this way and if it fails it will
failback to the normal "brute" force way.

this will be the case in major percentage of cases.

kr

On Wed, Feb 9, 2011 at 11:49 AM, Miroslav Stampar
<mir...@gm...> wrote:
> done.
>
> find it implemented in latest revision (r3287).
>
> kr
>
> On Tue, Feb 8, 2011 at 5:35 PM, Miroslav Stampar
> <mir...@gm...> wrote:
>> we'll try to implement it in next few days
>>
>> kr
>>
>> On Mon, Feb 7, 2011 at 2:07 PM, Stiefenhofer, Marek
>> <M.S...@r-...> wrote:
>>> Hi all,
>>>
>>>
>>>
>>> in some rare cases default permissions on Access Databases have been
>>> modified, allowing at least read access for the default user to the system
>>> table: MSysObjects.
>>>
>>> In those cases it is easy to get the tablenames like that:
>>>
>>>
>>>
>>> SELECT MSysObjects.Name FROM MSysObjects WHERE MSysObjects.Type=1
>>>
>>>
>>>
>>> Is it worth to include this before the bruteforce tests that SQLmap is
>>> doing? Nevertheless there’s no way to enumerate column names…
>>>
>>>
>>>
>>> -marek
>>>
>>> ------------------------------------------------------------------------------
>>> The modern datacenter depends on network connectivity to access resources
>>> and provide services. The best practices for maximizing a physical server's
>>> connectivity to a physical network are well understood - see how these
>>> rules translate into the virtual world?
>>> http://p.sf.net/sfu/oracle-sfdevnlfb
>>> _______________________________________________
>>> sqlmap-users mailing list
>>> sql...@li...
>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>>
>>>
>>
>>
>>
>> --
>> Miroslav Stampar
>>
>> E-mail: miroslav.stampar (at) gmail.com
>> Alternate: miroslav.stampar (at) mail.ru
>> PGP Key ID: 0xB5397B1B
>> Location: Zagreb, Croatia
>>
>
>
>
> --
> Miroslav Stampar
>
> E-mail: miroslav.stampar (at) gmail.com
> Alternate: miroslav.stampar (at) mail.ru
> PGP Key ID: 0xB5397B1B
> Location: Zagreb, Croatia
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
Alternate: miroslav.stampar (at) mail.ru
PGP Key ID: 0xB5397B1B
Location: Zagreb, Croatia