Lucene search

K
myhack58佚名MYHACK58:6220053550
HistoryOct 05, 2005 - 12:00 a.m.

The injection point that whether there is hard disk access-vulnerability warning-the black bar safety net

2005-10-0500:00:00
佚名
www.myhack58.com
7

Now to everyone talk about how through the injection point determines theserviceController hard drive(partition)whether there is access to the right

This routine is very simple, if you will then please do not look at the, THE, the, the

With the last I made the video, a simple injection, and the music stand to the test.

The injection point is to address what the next forget, I find

Don’t be mean. Say bad words~~ just that person sick, is BS

<http://www.fun668.com/user/wmadown.asp?id=48187&gt;
This is the injection point.~~~
Now we’re using a SQL query statement to try and C whether the disc has access

Statement: and (select count(*) from c:\autoexec.bat.c)>0

Explain the principles of the other ACthe datathe library is also can be cross-database query of~~ as long as the from after the table name
Change to MDBdatalibraries hard disk absolute address, the background plus one . Connected to check table name
For example, I want to search the D drive yqf. mdb in the ADMIN table

and (select count(*) from d:\yqf.mdb.admin)>0
Such a statement, just know that theserviceController hard otherdatalibrary address
ACCESS can also be cross-database query, just do not know the address, so this is irrelevant

and (select count(*) from c:\autoexec.bat.c)>0
Why say with this sentence can determine whether a hard disk access permissions., A, The
Everyone knows that, the c:\autoexec.bat is a system in its own file regardless of which system has
And everyone default installation of WINDOWS is installed in C drive, if such a file is not found, you can
Try other disc~~~

Now we submit: and (select count(*) from c:\autoexec.bat.c)>0

See it] not identifieddatadatabase format ‘c:\AUTOEXEC.BAT’ the.
The error message, This shows it, that C disk has access permissions, the
Because read the AUTOEXEC for. BAT the autoexec. bat when the mdbdatalibrary to handle.

So it appears this error message

Now we just pass the horse to go and see

Uh, the C disk have access.~~~~ conversely, if the no access permission, you will be prompted

c:\autoexec.bat has been another way opened, or is not entitled to access.

Like this tips, is unprivileged access.

But autoexec. bat can test… For example c:\winnt\system32\cmd.exe
These system The Original file can be used to test

Hey. Well this is it.~~~~~

Not much to say, that