Shell from SQLi??

[z3ro]

Any way I could drop a shell on a server with SQLi??

[NeX]

Depends You can use INTO FILE for MySQL and there's a little trick for mssql to run cmd commands..

[ande]

Like NeX said, yes there are ways of doing it. But from experience it almost never work. You are better of getting logins from the DB and try to upload a shell through some admin panel or something similar.

[relax]

do you know the username and password to the mysql server?
if u do you could run
mysql -h [ip] -u [username] -p [password]
then in console
SELECT ('code') INTO OUTFILE "[PATH]";
or some variant of that. you can also check out
http://websec.wordpress.com/2007/11/17/mysql-into-outfile/

[z3ro]

do you know the username and password to the mysql server?
if u do you could run
mysql -h [ip] -u [username] -p [password]
then in console
SELECT ('code') INTO OUTFILE "[PATH]";
or some variant of that. you can also check out
http://websec.wordpress.com/2007/11/17/mysql-into-outfile/

hmm... i'm gonna take a look.. Thanks