I shall now present a method which appear to be long forgotten.
I first stumbled upon it back in 2008 when the group VFH (Vuxna Förbannade Hackare) spread havoc upon Swedish agencies and organizations.
Trigger based backdoors in MySQL.
More+While strolling through mysql.com I came across this page.
There you can view the possibility of the bitwise function right shift.
A bitwise right shift will shift the bits 1 location to the right and add a 0 to the front.
Heya! It’s been a long while since I wrote something here so I’d though I’d dust of the blogger keyboard and get some posts going. To start off I will cover the MySQL Injection in INSERT and UPDATE statements. What injection points in an INSERT query can we extract data from?
More+After some more work I am proud to announce that I will release version 1.1 of the MySQL network exploitation toolkit, for the people who don’t follow us that much; this is a tool with which you can make your computer listen over port 445 and your computer will act as a SMB server.
More+Over the past week i have been busy in the lab developing new attack vectors to MySQL injections by using the inter protocol capability with the load_file() function. With load_file(); you are able to load files from another machine over SMB, this happens through the underlaying system’s SMB client…
More+