Commit Graph

4 Commits

Author SHA1 Message Date
Jason Juntunen
4d259790cd
Change MSSQL dns_request.sql to reduce escaping issues
Modified the xp_dirtree and xp_cmdshell UNC paths to use forward slashes instead of backslashes, and removed the space between the procedure name and quoted path.

These changes help to avoid escaping/encoding issues, for example when using JSON. MSSQL still handles it the same way and will cause a DNS query or SMB authentication attempt.
2025-01-23 21:14:45 -06:00
Marvin Louis
48c967c01d
add support to leverage CVE-2014-6577 for Oracle DNS data exfiltration (#5410)
Co-authored-by: marvin <marvin@debian-BULLSEYE-live-builder-AMD64>
2023-05-25 11:27:15 +02:00
Miroslav Stampar
c00a642569 Implementing support for --file-read on Oracle (Issue #26) 2019-06-03 14:21:26 +02:00
Miroslav Stampar
ef7d4bb404 Some refactoring (data) 2019-05-24 12:01:39 +02:00