> Information Gathering SQL injection aka SQLi is a web security vulnerability that allows an attacker to interfere with the queries that an application makes to its database. It generally allows an attacker to ...
Abusing MSSQL Linked Servers [ Adding SA User & File Read ]
> Information Gathering Microsoft SQL Server is a relational database management system developed by Microsoft. As a database server, it is a software product with the primary function of storing and retrieving ...
Vega Writeup PwnTillDawn
> Information Gathering In every engagement, one has to start with the usual information gathering. information gathering on network devices will definitely include port scanning. Nmap is my favorite port scanni...
Stuntman Mike Writeup PwnTillDawn
> Information Gathering Is there a way to attack a system without gathering information? As usual we need to fire nmap on the target to find out what ports are open and what services are running on these ports. T...
Elmariachi-PC Writeup PwnTillDawn
> Information Gathering Fire nmap as usual, and from the scan we can see port 445 (smb), 3389 (rdp) & 60000 (ThinVnc). The first two ports are common on windows environments but the other port 60000 is someth...