The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

276

Chapter 9 

■

Injecting Code

70779c09.qxd:WileyRed  9/14/07  3:13 PM  Page 276

---

initiating any inbound connections to your computer, and if so, consult your

server documentation to ensure it is correctly configured.

Leveraging the Operating System

It is often possible to perform escalation attacks via the database that result in

execution of arbitrary commands on the operating system of the database

server itself. In this situation, there are many more avenues available to you for

retrieval of data, such as using built-in commands like 

tftp

, 

mail

, and 

telnet

,

or copying data into the web root for retrieval using a browser. See the later

section “Beyond SQL Injection” for techniques for escalating privileges on the

database itself.