Re: [PEN-TEST] stacking SQL requests

["M. Burnett" <mburnett () XATO NET>]

> (who know about a stored-procedure in MS SQL allowing to send results by
> mail ?)

There is an extended stored procedure in MS SQL called xp_sendmail:

xp_sendmail (T-SQL)
Sends a message and a query result set attachment to the specified
recipients.

Syntax
xp_sendmail {[@recipients =] 'recipients [;...n]'}
    [,[@message =] 'message']
    [,[@query =] 'query']
    [,[@attachments =] attachments]
    [,[@copy_recipients =] 'copy_recipients [;...n]'
    [,[@blind_copy_recipients =] 'blind_copy_recipients [;...n]'
    [,[@subject =] 'subject']
    [,[@type =] 'type']
    [,[@attach_results =] 'attach_value']
    [,[@no_output =] 'output_value']
    [,[@no_header =] 'header_value']
    [,[@width =] width]
    [,[@separator =] 'separator']
    [,[@echo_error =] 'echo_value']
    [,[@set_user =] 'user']
    [,[@dbuse =] 'database']



Note that the xp_startmail command must first be used before sending mail.