module

Oracle MySQL UDF Payload Execution

Try Surface Command
Back to search
Disclosed
2009-01-16
Created
2018-06-14

Description

This module creates and enables a custom UDF (user defined function) on the
target host via the SELECT ... into DUMPFILE method of binary injection. On
default Microsoft Windows installations of MySQL (= permissions not enforced, and the MySQL service runs as LocalSystem.

NOTE: This module will leave a payload executable on the target system when the
attack is finished, as well as the UDF DLL, and will define or redefine sys_eval()
and sys_exec() functions.

Authors

Bernardo Damele A. G. bernardo.damele@gmail.com
todb todb@metasploit.com
h00die

Platform

Linux,Windows

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


    msf > use exploit/multi/mysql/mysql_udf_payload
    msf exploit(mysql_udf_payload) > show targets
        ...targets...
    msf exploit(mysql_udf_payload) > set TARGET < target-id >
    msf exploit(mysql_udf_payload) > show options
        ...show and set options...
    msf exploit(mysql_udf_payload) > exploit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today