killchain-compendium/exploit/sqli/mssql.md

124 B

MSSQL

Usage

  • sqsh as a shell
  • After connection is established check `xp_cmdshell'
xp_cmdshell 'whoami';