In the Open

MSSQL

Usage

  • sqsh as a shell
  • After connection is established check `xp_cmdshell'
xp_cmdshell 'whoami';