January 2008 - Posts

xp_cmdshell

xp_cmdshell is essentially a mechanism to execute arbitrary calls into the system using either the SQL Server context (i.e. the Windows account used to start the service) or a proxy account that can be configured to execute xp_cmdshell using different Read More...

Posted 10 January 08 04:23 by raulga | 2 Comments   

Search

This Blog

• Home
• Email

Tags

• Compliance
• Cryptography
• Execution context
• firewall
• Microsoft Source Code Analyzer for SQL Injeciton
• network security
• SQL Injection ASP

Archives

• November 2009 (1)
• October 2009 (1)
• June 2009 (2)
• May 2009 (2)
• April 2009 (2)
• March 2009 (4)
• February 2009 (2)
• January 2009 (3)
• December 2008 (3)
• November 2008 (1)
• October 2008 (2)
• August 2008 (1)
• July 2008 (2)
• June 2008 (2)
• March 2008 (1)
• January 2008 (1)
• December 2007 (1)
• November 2007 (1)

Links of Interest

• Laurentiu Cristofor's Blog
• Raul Garcia's Blog
• SQL Security Forum
• SQL Server Katmai Security
• SQL Protocols
• Connect - SQL Server
• Lyudmila Fokina's Blog

Syndication

• RSS 2.0
• Atom 1.0