[sqlmap-users] Is xp_cmdshell actived? Why it isn't working?
Brought to you by:
inquisb
From: Rodrigo Z. S. <rod...@gm...> - 2014-12-07 17:19:33
|
Hi. I am doing a pen test in the Microsoft SQL Server 2008 R2 and I can see that the xp_cmdshell is active. IN the table *master.sys.configurations*, the column *value_in_use *show it is 1, so it is active!! But, every command that I tried to use didn't result any value. I just tried the most obvious: DECLARE @result int; EXEC @result = xp_cmdshell 'echo a'; IF (@result = 0) WAITFOR DELAY '00:01:00' ELSE WAITFOR DELAY '00:00:05' But it just waint 5 second. Any idea why this happens? |