I was going through OOB scenario as mentioned here (Windows scenario).
https://www.exploit-db.com/docs/english/41273-mysql-out-of-band-hacking.pdf
I have very few queries that I couldn’t get answer over internet.
- Does select into outfile or load_file allows writing directly to a remote filesystem on ubuntu and Windows?
- if by default, it does not allow writing to remote system, I assume we get this in Windows through \, UNC path. Is there any way for Ubuntu?
- What would be the case for Windows and Ubuntu regarding DNS and HTTP?
I think the core answer lies in the fact if the original functions allow network request.