Hi. I am doing a pen test in the Microsoft SQL Server 2008 R2 and I can see
that the xp_cmdshell is active.
IN the table *master.sys.configurations*, the column *value_in_use *show it
is 1, so it is active!! But, every command that I tried to use didn't
result any value. I just tried the most obvious:
DECLARE @result int; EXEC @result = xp_cmdshell 'echo a'; IF (@result = 0)
WAITFOR DELAY '00:01:00' ELSE WAITFOR DELAY '00:00:05'
But it just waint 5 second. Any idea why this happens?
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
