From 66e58276390c38a83be9c0c3af12c16e94e590e9 Mon Sep 17 00:00:00 2001 From: Alex G <24873615+Zeecka@users.noreply.github.com> Date: Fri, 19 Feb 2021 22:42:27 +0100 Subject: [PATCH] Add master.mdf MSSQL path to Windows LFI --- Fuzzing/LFI/LFI-gracefulsecurity-windows.txt | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/Fuzzing/LFI/LFI-gracefulsecurity-windows.txt b/Fuzzing/LFI/LFI-gracefulsecurity-windows.txt index 1439d4bd..355293ec 100644 --- a/Fuzzing/LFI/LFI-gracefulsecurity-windows.txt +++ b/Fuzzing/LFI/LFI-gracefulsecurity-windows.txt @@ -65,3 +65,9 @@ C:/Program Files/MySQL/MySQL Server 5.1/my.ini C:/Windows/System32/inetsrv/config/schema/ASPNET_schema.xml C:/Windows/System32/inetsrv/config/applicationHost.config C:/inetpub/logs/LogFiles/W3SVC1/u_ex[YYMMDD].log +C:/Program Files/Microsoft SQL Server/MSSQL.1/Template Data/master.mdf +C:/Program Files/Microsoft SQL Server/MSSQL10.SQLEXPRESS/Template Data/master.mdf +C:/Program Files/Microsoft SQL Server/MSSQL11.SQLEXPRESS/Template Data/master.mdf +C:/Program Files/Microsoft SQL Server/MSSQL12.SQLEXPRESS/Template Data/master.mdf +C:/Program Files/Microsoft SQL Server/MSSQL13.SQLEXPRESS/Template Data/master.mdf +C:/Program Files/Microsoft SQL Server/MSSQL14.SQLEXPRESS/Template Data/master.mdf