Metasploit mailing list archives
Re: equivalance of darkOraSQli.py
From: Richard Miles <richard.k.miles () googlemail com>
Date: Sat, 27 Mar 2010 10:36:36 -0500
As Sumit told... Pangolin is bit suspicious. I did not check myself but see the following report: http://laramies.blogspot.com/2009/05/pangolin-and-your-data.html <http://laramies.blogspot.com/2009/05/pangolin-and-your-data.html> On Thu, Mar 25, 2010 at 9:29 PM, Jacky Jack <jacksonsmth698 () gmail com>wrote:
Pangolin free version doesn't support Oracle. What I wish is to gain shell back from Oracle Web SQL Injection. Is this module available in Metasploit ? On Fri, Mar 26, 2010 at 10:06 AM, Richard Miles <richard.k.miles () googlemail com> wrote:Maybe Pangolin? http://www.nosec.org/tag.php?tag=Pangolin On Thu, Mar 25, 2010 at 8:34 PM, Jacky Jack <jacksonsmth698 () gmail com> wrote:Thanks, by the way, sqlmap sucks to me. For some URL (get request) , it states that the params are not injectable where they are in fact injectable. On Fri, Mar 26, 2010 at 12:57 AM, Ulisses Castro <uss.thebug () gmail com> wrote:Hi Jacky, Metasploit has sqlmap module inside, also you can use stand alonesqlmaptoo. My two cents... On Wed, Mar 24, 2010 at 10:05 PM, Jacky Jack <jacksonsmth698 () gmail com>wrote:Hi all As darkc0de is down, I can't download darkOraSQli which use OracleSQLInjection that exploits dbms_export_extension. Does Metasploit have such kind of plugins for attacking Oracle viaweb? Thank you. _______________________________________________ https://mail.metasploit.com/mailman/listinfo/framework-- Ulisses Castro, CEH, LPIC-2 Security Researcher Blog: http://ulissescastro.wordpress.com Twitter: http://www.twitter.com/usscastro Conviso IT Security - http://www.conviso.com.br_______________________________________________ https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________ https://mail.metasploit.com/mailman/listinfo/framework
Current thread:
- equivalance of darkOraSQli.py Jacky Jack (Mar 24)
- Re: equivalance of darkOraSQli.py Ulisses Castro (Mar 25)
- Re: equivalance of darkOraSQli.py Jacky Jack (Mar 25)
- Re: equivalance of darkOraSQli.py Richard Miles (Mar 25)
- Re: equivalance of darkOraSQli.py Jacky Jack (Mar 25)
- Re: equivalance of darkOraSQli.py Jacky Jack (Mar 25)
- Message not available
- Re: equivalance of darkOraSQli.py Jacky Jack (Mar 26)
- Re: equivalance of darkOraSQli.py Jacky Jack (Mar 25)
- Re: equivalance of darkOraSQli.py Richard Miles (Mar 27)
- Re: equivalance of darkOraSQli.py Jacky Jack (Mar 27)
- Re: equivalance of darkOraSQli.py Ulisses Castro (Mar 25)