Re: [sqlmap-users] Is xp_cmdshell actived? Why it isn't working?

[Miroslav S. <mir...@gm...>]

No execution rights?

Bye
On Dec 7, 2014 6:19 PM, "Rodrigo Zanatta Silva" <
rod...@gm...> wrote:

> Hi. I am doing a pen test in the Microsoft SQL Server 2008 R2 and I can
> see that the xp_cmdshell is active.
>
> IN the table *master.sys.configurations*, the column *value_in_use *show
> it is 1, so it is active!! But, every command that I tried to use didn't
> result any value. I just tried the most obvious:
>
> DECLARE @result int; EXEC @result = xp_cmdshell 'echo a'; IF (@result = 0)
> WAITFOR DELAY '00:01:00' ELSE WAITFOR DELAY '00:00:05'
>
> But it just waint 5 second. Any idea why this happens?
>
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
>
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>