creating_a_asp_command_shell_using_BACKUP

[a_satan_funeral]

This is a small text document that describes how MS SQL can be "tricked" into creating a command.asp script under the webroot, even when you do not have access to 'sa' privs (dbo privs are probably still a must, though). The technique described uses the SQL server 'backup' command.

[Behrooz_Ice]

بامداد جان من اين مقاله رو دو ه�?ته پيش گذاشتم تو سايت در لينك زير:
[Only registered and activated users can see links]
مقاله خيلي جالبي هم هست درباره SQL و هك كردن ديتابيس از طريقه Backup گر�?تن ;;) من اين تاپيك را پاك مي كنم. �?علا ..