32 lines
518 B
Markdown
32 lines
518 B
Markdown
|
## SQLToolsPS.exe
|
||
|
|
|
||
|
|
* Functions: Execute, evade logging
|
||
|
|
|
||
|
|
```
|
||
|
|
SQLToolsPS.exe -noprofile
|
||
|
|
```
|
||
|
|
|
||
|
|
Acknowledgements:
|
||
|
|
* Pierre-Alexandre Braeken - @pabraeken
|
||
|
|
|
||
|
|
Code sample:
|
||
|
|
|
||
|
|
* Downloading & executing a file
|
||
|
|
|
||
|
|
```
|
||
|
|
C:\Users>"C:\Program Files (x86)\Microsoft SQL Server\130\Tools\Binn\SQLToolsPS.exe -noprofile -command Start-Process calc"
|
||
|
|
```
|
||
|
|
|
||
|
|
Resources:
|
||
|
|
* https://twitter.com/pabraeken/status/993298228840992768
|
||
|
|
|
||
|
|
Full path:
|
||
|
|
```
|
||
|
|
C:\Program files (x86)\Microsoft SQL Server\130\Tools\Binn\sqlps.exe
|
||
|
|
```
|
||
|
|
|
||
|
|
Notes:
|
||
|
|
A Powershell host.
|
||
|
|
|
||
|
|
|