Re: Send output to file in SQL

From: Alex S. Harasic (aharasicat_private)
Date: Thu Mar 21 2002 - 04:31:24 PST

  • Next message: Zacharias Pigadas: "RE: SQL Injection - retrieving all rows"

    Actually, the main idea of my posting was to create a file using sql
    commands but as a SQL Injection thing. But it seems to be that the only way
    to go is using either xp_cmdshell or makewebtasks extended procedures...
    
    
    Alex S. Harasic
    aharasicat_private
    
    
    ----- Original Message -----
    From: "Jonah Kowall" <jkowallat_private>
    To: "Alex Harasic" <aharasicat_private>; <pen-testat_private>
    Sent: Friday, March 15, 2002 2:36 PM
    Subject: RE: Send output to file in SQL
    
    
    Are you running mssql 2000 or an earlier version?  If you are running
    2k, then you may be able to use the sp_makewebtask stored procedure.
    
    Or you can run isql from the command line:
    
    If you want the output to a .txt file just use isql at a cmd prompt
    (%MSSQLPATH%\binn\isql > c:\mssql\binn\isql) with the parameter -o for
    outputfile and use -q for the query or -i for inputfile (if you got
    several statements).
    
    c:\mssql\binn\isql -Usa -P -ddb1 -Sserv1 -i in.sql -o out.txt
    where: -Usa > user, -P > password, -ddb1 > your database, -i in.sql >
    your input file, -o out.txt > your output file.
    
    > -----Original Message-----
    > From: Alex Harasic [mailto:aharasicat_private]
    > Sent: Wednesday, March 13, 2002 12:05 PM
    > To: pen-testat_private
    > Subject: Send output to file in SQL
    >
    >
    >
    >
    > Hi, I've been looking around for ways to send output
    >
    > to a file in a sql query. I know there is one for mySQL
    >
    > but not for msSQL.
    >
    >
    >
    > Anyone knows a way to send the output in a query
    >
    > without using extended procedures?
    >
    >
    >
    >
    >
    > Alex S. Harasic
    >
    > aharasicat_private
    >
    > --------------------------------------------------------------
    > --------------
    > This list is provided by the SecurityFocus Security
    > Intelligence Alert (SIA) Service. For more information on
    > SecurityFocus' SIA service which automatically alerts you to
    > the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Thu Mar 21 2002 - 08:38:48 PST