xp-cmdshell

There are 0 repository under xp-cmdshell topic.

iricartb / advanced-sql-injection-scanner
Ivan Ricart Borges - Test for didactic purposes of web pages vulnerables to SQL injection using dbo database user with xp_cmdshell execution permissions. Using patterns from Internet search engines to extract potentially vulnerable web addresses and test them by changing the GET parameters using invalid Transact-SQL conversion function to cause through unhandled errors by IIS web server to show critical information. If certain features are given and using advanced injection techniques a malicious attacker could gain control of the entire system by executing shell commands in the SQL database engine.
c-sharp sqlserver injection xp-cmdshell transact-sql scanner search-engine vulnerability exploit dbo iis microsoft database webserver rce visual-studio
Language:C# 20

iricartb / advanced-sql-injection-scanner