[Release] MSSQL Exploit for leaking & editing databases

[torstmn]

Hey guys,
needed about 1 hour to write it, after a while having fun with it I thought about releasing it (source code included).

Features:
+ Send query
+ Get table / data
+ Download table (full)
+ Download whole database
+ Use a script (script explanation below!)

How to:
1.) Run the cert chernobyl released to get the database access information.
2.) Open up connection_settings.dat and enter the database info.
3.) Run MSSQL Exploit.exe and wait a moment so it can connect to database.
4.) Have fun.

Included example scripts:

[AddItem]
[ClearPkStatus]
[GiveSilk]
[SetGold]
[SetGuildLevel]
[SetHwanLevel](Zerk level)
[SetInventorySize]
[SetLevel]
[SetNewName]
[SetSTR&INT]

Information
- Leaked tables & databases can be found under:
'%myProgram%\output\%serverip%\%databaseName%\tabl eName.txt'

Scripts:
The package contains 10 example scripts.
use @myvar to declare a new parameter.
use // in front of a line to create a comment.
IMPORTANT: For each query 1 line!

Script example:

//Gives silk to a user.
@silk
@user
update SK_Silk set silk_own = silk_own + '@silk' where JID = '@user'

Actually I was just bored... Every child could code such a tool.
Quick image:


Download
(compiled)

(source c#)

*So guys, hope you like my coding style

Common problems:

+ Target doesn't accept incoming SQLConnections.
+ Target doesn't accept incoming SQLConnections.
+ Target doesn't accept incoming SQLConnections.

[Disco Teka]

#approved

[PortalDark]

cool
still, this is a pretty simple tool
unless you get server mssql login, it will be nothing but useless
again, cool for the share

[wind111]

ty.

1.) Run the cert chernobyl released to get the database access information.

where can i find it ?

[mertcoskun]

Now All the kids will try to fck the servers.Congratulations!

[rushcrush]

Originally Posted by mertcoskun

Now All the kids will try to fck the servers.Congratulations!

it wont work on servers who have good protection

[wind111]

Originally Posted by mertcoskun

Now All the kids will try to fck the servers.Congratulations!

private server is illegal any way ,

[insertcoi]

1.) Run the cert chernobyl released to get the database access information.
what is this ? how to get it ?

[PortalDark]

Originally Posted by insertcoi

1.) Run the cert chernobyl released to get the database access information.
what is this ? how to get it ?

use search

[ღ ∂ Ropp]

Originally Posted by PortalDark

use search

And your suppose to be forum Guardian?

Jesus, just give him the link? o.O

On-Topic ; here ya go,

[_sweety_cat_]

how to use it ? can any1 make a video xD?

[grasvys112]

hi what port use in chernobyl cert ?

[Aerox1337]

port :32000 ,epic

[PortalDark]

Originally Posted by grasvys112

hi what port use in chernobyl cert ?

32000
but if you are smart, 90% of servers now have it closed

as i said before, this is useless unless you get to know servers login credentials

[wind111]

use search

i just don't know what is that .

And your suppose to be forum Guardian?

Jesus, just give him the link? o.O

On-Topic ; here ya go, pack.rar

You are the best . Good luck


how can i get server ip address and (spoof)

ty