You don't need just to have it activated? You say I can't run the EXEC?
Any other way to avoid it?
Is there anything I can do? Humm. Come in mind to impersonate another user
and pray they can do this.
2014-12-07 17:25 GMT-02:00 Miroslav Stampar <miroslav.stam...@gmail.com>:
> No execution rights?
>
> Bye
> On Dec 7, 2014 6:19 PM, "Rodrigo Zanatta Silva" <
> rodrigozanattasi...@gmail.com> wrote:
>
>> Hi. I am doing a pen test in the Microsoft SQL Server 2008 R2 and I can
>> see that the xp_cmdshell is active.
>>
>> IN the table *master.sys.configurations*, the column *value_in_use *show
>> it is 1, so it is active!! But, every command that I tried to use didn't
>> result any value. I just tried the most obvious:
>>
>> DECLARE @result int; EXEC @result = xp_cmdshell 'echo a'; IF (@result =
>> 0) WAITFOR DELAY '00:01:00' ELSE WAITFOR DELAY '00:00:05'
>>
>> But it just waint 5 second. Any idea why this happens?
>>
>>
>> ------------------------------------------------------------------------------
>> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
>> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
>> with Interactivity, Sharing, Native Excel Exports, App Integration & more
>> Get technology previously reserved for billion-dollar corporations, FREE
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
>> _______________________________________________
>> sqlmap-users mailing list
>> sqlmap-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>
>>
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
