Hey guys,
needed about 1 hour to write it, after a while having fun with it I thought about releasing it (source code included).
Features:
+ Send query
+ Get table / data
+ Download table (full)
+ Download whole database
+ Use a script (script explanation below!)
How to:
1.) Run the cert chernobyl released to get the database access information.
2.) Open up connection_settings.dat and enter the database info.
3.) Run MSSQL Exploit.exe and wait a moment so it can connect to database.
4.) Have fun.
Included example scripts:
- Leaked tables & databases can be found under:
'%myProgram%\output\%serverip%\%databaseName%\tabl eName.txt'
Scripts:
The package contains 10 example scripts.
use @myvar to declare a new parameter.
use // in front of a line to create a comment.
IMPORTANT: For each query 1 line!
Script example:
Actually I was just bored... Every child could code such a tool.
Quick image:
[Only registered and activated users can see links. Click Here To Register...]
Download
(compiled)
needed about 1 hour to write it, after a while having fun with it I thought about releasing it (source code included).
Features:
+ Send query
+ Get table / data
+ Download table (full)
+ Download whole database
+ Use a script (script explanation below!)
How to:
1.) Run the cert chernobyl released to get the database access information.
2.) Open up connection_settings.dat and enter the database info.
3.) Run MSSQL Exploit.exe and wait a moment so it can connect to database.
4.) Have fun.
Included example scripts:
InformationQuote:
[AddItem]
[ClearPkStatus]
[GiveSilk]
[SetGold]
[SetGuildLevel]
[SetHwanLevel](Zerk level)
[SetInventorySize]
[SetLevel]
[SetNewName]
[SetSTR&INT]
- Leaked tables & databases can be found under:
'%myProgram%\output\%serverip%\%databaseName%\tabl eName.txt'
Scripts:
The package contains 10 example scripts.
use @myvar to declare a new parameter.
use // in front of a line to create a comment.
IMPORTANT: For each query 1 line!
Script example:
Quote:
//Gives silk to a user.
@silk
@user
update SK_Silk set silk_own = silk_own + '@silk' where JID = '@user'
Actually I was just bored... Every child could code such a tool.
Quick image:
[Only registered and activated users can see links. Click Here To Register...]
Download
(compiled)
(source c#)Quote:
[Only registered and activated users can see links. Click Here To Register...]
Common problems:Quote:
[Only registered and activated users can see links. Click Here To Register...]
*So guys, hope you like my coding style
Quote:
+ Target doesn't accept incoming SQLConnections.
+ Target doesn't accept incoming SQLConnections.
+ Target doesn't accept incoming SQLConnections.