Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extract all schemas, not just the default one #10

Closed
pruzko opened this issue Jan 4, 2024 · 1 comment
Closed

Extract all schemas, not just the default one #10

pruzko opened this issue Jan 4, 2024 · 1 comment

Comments

@pruzko
Copy link
Owner

pruzko commented Jan 4, 2024

It is (typically) possible to extract all schemas from vulnerable web applications, but Hakuin now only extracts the default one, the one that the application is connected to. Supporting extraction of all schemas should only require rewriting the injected queries to take the DB name into consideration. For instance, users will become dbo.users.

@pruzko pruzko changed the title Extract all databases, not just the application one Extract all schemas, not just the default one Mar 31, 2024
@pruzko
Copy link
Owner Author

pruzko commented Mar 31, 2024

Hakuin can now extract the list of all schemas by invoking Extractor.extract_schema_names() or via hk.py ... -x schemas. Furthermore, all extraction functions now have an extra parameter, to target a specific schema, e.g., Extractor.extract_table_names(schema='dbo') or hk.py ... -s dbo.

Implemented in 64f777f.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant