Kullanmayan varsa aradan SQLMAP'ı da nerelim :P En kral sql injection tooludur --tor eklentisi sizi invisible yapar :P

hatta cd.. cd pentest/database/.. toolarını kullanın "

http://sqlninja.sourceforge. net/download.html Nedir, ne işe yarar; Fingerprint of the remote SQL Server Bruteforce of 'sa' password (in 2 flavors: dictionary-based and incremental) Privilege escalation to sysadmin group if 'sa' password has been found Creation of a custom xp_cmdshell if the original one has been removed Upload of netcat using only normal HTTP requests TCP/UDP portscan from the target SQL Server to the attacking machine, in order to find a port that is allowed by the firewall of the target network and use it for a reverse shell Direct and reverse bindshell, both TCP and UDP ICMP-tunneled shell, when no TCP/UDP ports are available for a direct/reverse shell but the DB can ping your box DNS-tunneled pseudo-shell, when no TCP/UDP ports are available for a direct/reverse shell, but the DB server can resolve external hostnames Evasion techniques to confuse a few IDS/IPS/WAF Integration with Metasploit3, to obtain a graphical access to the remote DB server through a VNC server injection Integration with churrasco. exe, to escalate privileges to SYSTEM on w2k3 via token kidnapping Support for CVE-2010-0232, to escalate the privileges of sqlservr. exe to SYSTEM Sevmem yazmayı, okumayı sevdiğim kadar.

: Kullanmayan varsa aradan SQLMAP'ı da nerelim :P En kral sql injection tooludur --tor eklentisi sizi invisible yapar :P katılıyorum Emekçiler ekmeklerini, emeklerinin karşılığı olarak ve nlenemez tarihi sürecin sonucu olarak mutlaka kazanacaklardır. Şüphesiz bu, zorlu bir dnemdir kısa vadeli ve greceli yenilgilerden geçer.