wtorek, 11 czerwca 2013

Bruteforce search on MS SQL ;) (Platnik, Symbol, ZUS)

1st: list all tables in db and save it to file
use platnik_db
go

SELECT name
FROM sys.Tables
GO

2nd: generate long SQL for each table like this


[abram@pld64 tmp]$ cat x.sh
#!/bin/sh
while read LINE ; do
    echo "select * from [platnik_mzdw].[dbo].[$LINE]"
    echo "go"
    echo "\n"
done < lista.txt

3rd: run in in MS SQL studio or other software and save data to file

4th: search in file for "MY NAME BLA BLA" (content of Symbol)

5th: I found that Symbol is Nazwaskr in table PLATNIK ;)

Then go to previous post ;)

Blah!



Brak komentarzy:

Prześlij komentarz