full-disclosure - Re: Informix SQL injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 6 Feb 2007 10:36:19 +0200
From: "Zed Qyves" <zqyves.spamtrap@...il.com>
To: full-disclosure@...ts.grok.org.uk, joshua.tagnore@...il.com
Subject: Re: Informix SQL injection

>>From database hackers handbook courtesy of David Litchfield
---------------------------------------------------------------------------------------------

First create your temptable via standard SQL.

INSERT INTO temptable (name,conts) VALUES ('resultsfile',
FILETOCLOB('/tmp/result', 'server'))

Then select from that
------------------------------------------------------------------------------------------

The last param ('server') tells the command where to load the file
from. I am assuming that your commands run on the imformix server
macine, provided it is in a different server than the webserver.
However by changing it to 'client' you can load files from the client
side of the connection i.e the web server i.e. source code from the
web pages of the application.

have fun...

ZQ

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/