mailing list archives
msfcli not handling = correctly, or, how to escape =
From: Robin Wood <robin () digininja org>
Date: Sat, 22 May 2010 00:53:50 +0100
This is a cut down version of a SQL query I'm trying to run through msfcli
~/src/msf/msfcli admin/mssql/mssql_sql RHOST=192.168.0.54 RPORT=1433
USERNAME="sa" PASSWORD=xxx SQL="DECLARE @sql varchar (4000); SET
@sql='xxx' " E
But the query that gets sent gets truncated at the = near the end. I
assume that this is msfcli picking it up and treating it as a new
variable it should be handling despite it being in quotes. I tried
escaping it with a \ but that didn't help.
Is there a correct way to escape this or is it a bug?
- msfcli not handling = correctly, or, how to escape = Robin Wood (May 21)