Waraxe IT Security Portal

donkey · Regular user

hey guys

i am just playing with some mssql injection and in that case, i need some help.

if i want to get all the information from a table, what is the command..

select * from table will select the thing i guess, how can i make it show on the webpage ?

i got the colom name, table name, and a lot more info

when i enter a command like this

'UNION SELECT 1,1,1,1,1,1,1,1,1,1,1,1,1,convert(int, @@servername) WHERE 1=1--

Syntax error converting the nvarchar value 'SQL01' to a column of data type int.

now where i have table, colom name and stuff.. how can i bulk download the whole table.. is it possible ?

donkey · Regular user

no replies ? guys ..

waraxe · Site admin

Right now you seem to have only error-based feedback channel and in case of MSSQL2000 maximum data you can get via error message is ~ 353 bytes.
Unless you use some other channel for data fetching.

http://ferruh.mavituna.com/fast-way-to-extract-data-from-error-based-sql-injections-oku/

donkey · Regular user

what are other channels ? i have read somethings about getting data from dns and stuff which sounds too advanced... .. 353 byte .. isnt that too little data ? can i use some kind of script to get the whole thing down ? How can i test if i can get the data via other methods than error based

hope u will find some time to answer me questions Smile