Hack Forums
SQL Inject ---- Minecraft server - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: SQL Inject ---- Minecraft server (/showthread.php?tid=4411106)



SQL Inject ---- Minecraft server - Moosey™ - Aug 23, 2014

Can an SQL Inject be used to access/hack files being used by a minecraft server using an SQL data base?


* - The Sly - Aug 24, 2014

(Aug 23, 2014 04:26 PM)OfficialHD Wrote:  Can an SQL Inject be used to access/hack files being used by a minecraft server using an SQL data base?

If the webserver has an SQL injection vulnerability, I don't see why not.


* - OMGNEEDSLEEP - Aug 24, 2014

Yep, it can. But it depends on what files that are stored in the MySQL database, dont know what you wanna access?


* - c-note - Aug 24, 2014

(Aug 24, 2014 03:44 AM)OMGNEEDSLEEP Wrote:  Yep, it can. But it depends on what files that are stored in the MySQL database, dont know what you wanna access?

You probably did need some sleep because this post is inaccurate. The specific files stored in the database have almost no impact on SQL injection vulnerability existing in a web application. A specific vulnerability or exploit may exist due to the files stored in the database as you have suggested; but this is not example of a true SQLi attack vector. 👹


* - OMGNEEDSLEEP - Aug 24, 2014

(Aug 24, 2014 09:11 AM)c-note Wrote:  You probably did need some sleep because this post is inaccurate. The specific files stored in the database have almost no impact on SQL injection vulnerability existing in a web application. A specific vulnerability or exploit may exist due to the files stored in the database as you have suggested; but this is not example of a true SQLi attack vector. 👹

I'm sorry but I think you missunderstood my post.🤦‍♂


* - Th3PonyWizard - Aug 24, 2014

That depends strictly on the parser responsible for processing your user input.
(Aug 24, 2014 03:44 AM)OMGNEEDSLEEP Wrote:  Yep, it can. But it depends on what files that are stored in the MySQL database, dont know what you wanna access?
MySQL DBMS does not store files.


RE: SQL Inject ---- Minecraft server - Orboc - Oct 26, 2019

Best way to "hack" minecraft server is to perfrom a ddos attack sql injections are kind of useless, if you still want to do sql injection do it to their website, minecraft server websites are pootly programmed, with tons of flaws, if the site is php based go on and fuck it up!