I have been browsing the web looking for some help regarding the following issue. I am currently performing an web application penetration test, and I had come accross a beautiful blind SQL Injection.
Using sqlmap, I am able to retrieve the whole database. I would like to jump into the OS level, by using the xp_cmdshell functionality, which is currently disabled on the database. The application is running with the "sa" account, so it should be technically possible. However, when I get the following message when I try to enable it using sql map :
[12:14:22] [INFO] checking if xp_cmdshell extended procedure is available, please wait.. xp_cmdshell extended procedure does not seem to be available. Do you want sqlmap to try to re-enable it? [Y/n] [12:14:23] [WARNING] xp_cmdshell re-enabling failed [12:14:23] [INFO] creating xp_cmdshell with sp_OACreate [12:14:23] [WARNING] xp_cmdshell creation failed, probably because sp_OACreate is disabled [12:14:23] [CRITICAL] unable to proceed without xp_cmdshell
Some system information:
web server operating system: Windows 2012 web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 8.0 back-end DBMS: Microsoft SQL Server 2008
Does anyone know how I can solve this?