[sqlmap-users] mistake in readme.pdf
Brought to you by:
inquisb
From: Robin W. <ro...@di...> - 2014-12-04 15:30:21
|
This is from page 57 of the readme.pdf On MySQL and PostgreSQL, sqlmap uploads (via the file upload functionality explained above) a shared library (binary file) containing two user-defined functions, sys_exec() and sys_eval(), then it creates these two functions on the database and calls one of them to execute the specified command, depending on user’s choice to display the standard output or not. Shouldn't this just be for PostgreSQL? as it continues to say, MSSQL uses xp_cmdshell Robin |