james e642789674 Look for sp_execute_external_script in mssql_enum ... sp_execute_external_script can be used to execute code in MSSQL. MSSQL 2016+ can be configured to execute R code. MSSQL 2017 can be configured to execute Python code. Documentation: https://docs.microsoft.com/en-us/sql/relational-databases/system-stored-procedures/sp-execute-external-script-transact-sql https://docs.microsoft.com/en-us/sql/advanced-analytics/tutorials/rtsql-using-r-code-in-transact-sql-quickstart Interesting uses of sp_execute_external_script: R - https://pastebin.com/zBDnzELT Python - https://gist.github.com/james-otten/63389189ee73376268c5eb676946ada5		2017-08-16 21:40:03 -05:00
..
mssql_enum.rb	Look for sp_execute_external_script in mssql_enum	2017-08-16 21:40:03 -05:00
mssql_enum_domain_accounts.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_enum_domain_accounts_sqli.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_enum_sql_logins.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_escalate_dbowner.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_escalate_dbowner_sqli.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_escalate_execute_as.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_escalate_execute_as_sqli.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_exec.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_findandsampledata.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_idf.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_ntlm_stealer.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_ntlm_stealer_sqli.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_sql.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
mssql_sql_file.rb	use https for metaploit.com links	2017-07-24 06:26:21 -07:00