[sqlmap-users] Execute os commands
Brought to you by:
inquisb
From: Nikos T. <tar...@ho...> - 2014-02-23 20:18:18
|
Hello, there is an sqli in SQL SERVER 2008. When I execute sqlmap with the parameter --sql-shell it gives me the shell but when I try to execute a command it cannot get the output and it says that xp_cmdshell is disabled. (tried --no-cast and --hex as it suggests) I don't know if the output filtered by firewall, but how sqlmap is able to create a cmd-shell while xp_cmdshell is disabled? |