Skip to content

Commit 15119d2

Browse files
committed
comment fix-sorry
1 parent f108d7b commit 15119d2

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/auxiliary/admin/mssql/mssql_escalate_executeas.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -146,7 +146,7 @@ def check_imp_sysadmin(trust_db_list)
146146
end
147147

148148
def escalate_privs(imp_user_sysadmin)
149-
# Create the evil stored procedure WITH EXECUTE AS OWNER
149+
# Impersonate the first sysadmin user on the list
150150
evil_sql_create = "EXECUTE AS Login = '#{imp_user_sysadmin}';
151151
EXEC sp_addsrvrolemember '#{datastore['USERNAME']}','sysadmin';"
152152

0 commit comments

Comments
 (0)