Skip to content

Support to run a query as another DB user #34

@bdamele

Description

@bdamele
Member

When stacked queries is supported use OPENROWSET (MSSQL) and dblink() (PostgreSQL) to run a statement as a different user (e.g. higher privileged user for instance after a password cracking attack).

The same library code can be used in ticket #31.

Activity

ghost assigned on Jun 26, 2012
added a commit that references this issue on Jul 1, 2012
bdamele

bdamele commented on Jul 2, 2012

@bdamele
MemberAuthor

First rough implementation in commit 6697927 (forgot to reference this issue in the commit message)

bdamele

bdamele commented on Jul 9, 2012

@bdamele
MemberAuthor

Done for MSSQL.

bdamele

bdamele commented on Jul 12, 2012

@bdamele
MemberAuthor

As of PostgreSQL 9.1, dblink() function is still in the contrib folder and not packaged by default:

[...] modules that can be found in the contrib directory of the PostgreSQL distribution. These include porting tools, analysis utilities, and plug-in features that are not part of the core PostgreSQL system [...]

It requires the DBA to manually compile PostgreSQL and run the dblink.sql statement to create the function before being usable.

Hence, shall we support it despite there're very little chances we ever find it available? Comments are welcome.

stamparm

stamparm commented on Jul 12, 2012

@stamparm
Member

Currently Google says 135.000 results for search query: dblink postgresql. That doesn't say anything that if the task is not too hard to be accomplished it wouldn't be something of total lack of practical usage.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

    Development

    No branches or pull requests

      Participants

      @bdamele@stamparm

      Issue actions

        Support to run a query as another DB user · Issue #34 · sqlmapproject/sqlmap