mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-10-24 12:41:17 +03:00
4d259790cd
Modified the xp_dirtree and xp_cmdshell UNC paths to use forward slashes instead of backslashes, and removed the space between the procedure name and quoted path. These changes help to avoid escaping/encoding issues, for example when using JSON. MSSQL still handles it the same way and will cause a DNS query or SMB authentication attempt. |
||
|---|---|---|
| .. | ||
| activate_sp_oacreate.sql | ||
| configure_openrowset.sql | ||
| configure_xp_cmdshell.sql | ||
| create_new_xp_cmdshell.sql | ||
| disable_xp_cmdshell_2000.sql | ||
| dns_request.sql | ||
| enable_xp_cmdshell_2000.sql | ||
| run_statement_as_user.sql | ||