i would like to know how to hack DBMS server 2008 SQL Server, there are 17 databases but dont know which database is connected with the website page. Please can you help me out?
person
brightness_auto
closed with the note:
answer selected
1 Answer
You must be doing SQLi as your question suggests, well SELECT DB_NAME() should give you the current database. OR you can use sqlmap to know the current database with --current-db command. Sqlmap also has another powerful command "--os-shell" that can take over the server. Hope this might help and Best of luck.