Eskil Map also allows you to get different types of shells on the target server so you can actually
try to get an oyster shell using the shell argument.
So all you have to do is just run Ezekial Map.
And put the URL and then ask for an oil show.
Now, in my case, we've seen that we can't actually upload files to the server, so not asking me what
do I want?
What's what's the language that's used on the server it's using?
And you can see that the file is cannot be uploaded, it's given a 404 error because my website, my
target does not allow the MySQL user to upload stuff.
If this works, you'll actually get an oil shell and you'll be able to run those commands on the target
computer.
Another cool thing is you can ask for on Ezekial Shell.
And what this will give you, it will allow you to run any Ezekial statement straight away as if you're
running it through my Ezekial, so we were able to do that before anyone using the union select vote.
And this year you'll actually be right and proper ask you all queries and they'll look it's much easier
to write, much easier to read.
So you'll actually be able to run more powerful attacks.
For example, we can just select the user by saying current user.
Or we can just say user.
We can also get our current database by asking for the database.
You can look up Eskdale syntax and then run and yes, Cual Command, you want, for example, if we
wanted to select all the tables like we were doing before, we can just do select.
Table name.
From.
Information schema the tables.
Where tables kema.
Is equal to 10.
And I probably made a mistake here, I forgot, and so I'm just going to be in here and enter.
And they actually need an underscore here.
Sorry about that.
And as you can see now, we're getting all of the tables related to the database called our Asplen again,
and here you can run any Ezekial statement that you want.
It's just a nicer and easier way to execute your queries.