[dotcppfile]

Great tuts as always DownFall, thanks for sharing.

[dotcppfile]

This is probably one of the most important threads on HF and it got thrown away to the third page...

[JACK.HAMMER]

man how we can read all the file config ?!! its imossible how we can guess all the file ?

[wowrude]

This is probably one of the most important threads on HF and it got thrown away to the third page...

How often have you had the need to use load_file in conjunction with a time based MySQL injection vulnerability?

Just wondering.

[dotcppfile]

How often have you had the need to use load_file in conjunction with a time based MySQL injection vulnerability?

Just wondering.

I know you're job in this forum is to act smart and rude Lol but I would use Load_File whenever I can since it's one of the most important functions, don't you think?

[wowrude]

I know you're job in this forum is to act smart and rude Lol but I would use Load_File whenever I can since it's one of the most important functions, don't you think?

Well if you totally disregard the fact that it's only available while the mysql user is root or dba (aka virtually never), I guess you could call it important. In that case I would argue that it would be more imperative to be able to correctly use INTO OUTFILE with various types of SQLi rather than load_file.

[Ρain]

Nice. Been looking for a nice tutorial on both load_file and time based.

[dotcppfile]

Well if you totally disregard the fact that it's only available while the mysql user is root or dba (aka virtually never), I guess you could call it important. In that case I would argue that it would be more imperative to be able to correctly use INTO OUTFILE with various types of SQLi rather than load_file.

I never did that, I did say that I will use it whenever I can and as long as anyone around here have the privileges to use LOAD_FILE then they should because they can do whatever they want with it. I donno what's your point, everyone knows that we can't always use it so please try to say something useful...

[wowrude]

One condition was magic quotes enabled, it was one of the main factors of the tutorial, but it was rewritten and I included both examples with magic quotes on/off. As you know, you cant use into outfile with magic quotes, so this was written for the use of load_file. Of course outfile is a better option but giving the circumstances, it would be impossible with magic quotes on. PS - no matter how rare it is, it's best to have these writeups stashed away - you never know when you'll need them :3

Right - I'm not saying that this should be regarded as completely useless and thrown away, I just don't think it deserves the title of:

one of the most important threads on HF

[dotcppfile]

Right - I'm not saying that this should be regarded as completely useless and thrown away, I just don't think it deserves the title of:

I understand what you mean but the problem is that I looked in this section and I found tuts related to simple union based injections and xss challenges on the front page while something unique as this tutorial was forgotten about lol.