MSSQL injection uses xp_cmdshell to execute commands (fine)

Table of contents

introduce

Check if we can stack queries

check permissions

read command output

expand

---

introduce

Unlike MySQL, MSSQL provides xp_cmdshell, which allows us to execute system commands

In xp_cmdshell, most of the time we have the privilege to use