sqlmapproject / sqlmapproject/sqlmap

Support to run a query as another DB user

Open
#34 4 comments 0 reactions 1 assignee View on GitHub

@bdamele is already working on this.

Since Jun 26, 2012.

enhancement normal takeover
Dominant language
Python
Stars
38.5k
Forks
6.4k
Avg merge
3d 3h
Merged PRs (30d)
1

Description

When stacked queries is supported use OPENROWSET (MSSQL) and dblink() (PostgreSQL) to run a statement as a different user (e.g. higher privileged user for instance after a password cracking attack).

The same library code can be used in ticket #31.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.