metasploit-framework/modules/auxiliary/admin
james e642789674 Look for sp_execute_external_script in mssql_enum
sp_execute_external_script can be used to execute code in MSSQL.
MSSQL 2016+ can be configured to execute R code. MSSQL 2017 can
be configured to execute Python code.

Documentation:
https://docs.microsoft.com/en-us/sql/relational-databases/system-stored-procedures/sp-execute-external-script-transact-sql
https://docs.microsoft.com/en-us/sql/advanced-analytics/tutorials/rtsql-using-r-code-in-transact-sql-quickstart

Interesting uses of sp_execute_external_script:
R - https://pastebin.com/zBDnzELT
Python - https://gist.github.com/james-otten/63389189ee73376268c5eb676946ada5
2017-08-16 21:40:03 -05:00
..
2wire use https for metaploit.com links 2017-07-24 06:26:21 -07:00
android use https for metaploit.com links 2017-07-24 06:26:21 -07:00
appletv use https for metaploit.com links 2017-07-24 06:26:21 -07:00
atg use https for metaploit.com links 2017-07-24 06:26:21 -07:00
aws use https for metaploit.com links 2017-07-24 06:26:21 -07:00
backupexec use https for metaploit.com links 2017-07-24 06:26:21 -07:00
chromecast use https for metaploit.com links 2017-07-24 06:26:21 -07:00
cisco use https for metaploit.com links 2017-07-24 06:26:21 -07:00
db2 use https for metaploit.com links 2017-07-24 06:26:21 -07:00
dns use https for metaploit.com links 2017-07-24 06:26:21 -07:00
edirectory use https for metaploit.com links 2017-07-24 06:26:21 -07:00
emc use https for metaploit.com links 2017-07-24 06:26:21 -07:00
firetv use https for metaploit.com links 2017-07-24 06:26:21 -07:00
hp use https for metaploit.com links 2017-07-24 06:26:21 -07:00
http use https for metaploit.com links 2017-07-24 06:26:21 -07:00
kerberos use https for metaploit.com links 2017-07-24 06:26:21 -07:00
maxdb use https for metaploit.com links 2017-07-24 06:26:21 -07:00
misc use https for metaploit.com links 2017-07-24 06:26:21 -07:00
motorola use https for metaploit.com links 2017-07-24 06:26:21 -07:00
ms use https for metaploit.com links 2017-07-24 06:26:21 -07:00
mssql Look for sp_execute_external_script in mssql_enum 2017-08-16 21:40:03 -05:00
mysql use https for metaploit.com links 2017-07-24 06:26:21 -07:00
natpmp use https for metaploit.com links 2017-07-24 06:26:21 -07:00
netbios use https for metaploit.com links 2017-07-24 06:26:21 -07:00
officescan use https for metaploit.com links 2017-07-24 06:26:21 -07:00
oracle use https for metaploit.com links 2017-07-24 06:26:21 -07:00
pop2 use https for metaploit.com links 2017-07-24 06:26:21 -07:00
postgres use https for metaploit.com links 2017-07-24 06:26:21 -07:00
sap use https for metaploit.com links 2017-07-24 06:26:21 -07:00
scada use https for metaploit.com links 2017-07-24 06:26:21 -07:00
serverprotect use https for metaploit.com links 2017-07-24 06:26:21 -07:00
smb Modified Accuvant bog posts to the new Optive urls 2017-08-02 13:25:17 +10:00
sunrpc use https for metaploit.com links 2017-07-24 06:26:21 -07:00
tftp use https for metaploit.com links 2017-07-24 06:26:21 -07:00
tikiwiki use https for metaploit.com links 2017-07-24 06:26:21 -07:00
upnp use https for metaploit.com links 2017-07-24 06:26:21 -07:00
vmware use https for metaploit.com links 2017-07-24 06:26:21 -07:00
vnc use https for metaploit.com links 2017-07-24 06:26:21 -07:00
vxworks use https for metaploit.com links 2017-07-24 06:26:21 -07:00
webmin use https for metaploit.com links 2017-07-24 06:26:21 -07:00
zend use https for metaploit.com links 2017-07-24 06:26:21 -07:00