Mssql xp_cmdshell added "is enabled" check

[0xQRx]

---

name: Pull request
about: Update code to add an enhancement
title: Add functionality to check if xp_cmdshell is enabled before execution
labels: enhancement

Description

This update adds functionality to check if xp_cmdshell is enabled before attempting to enable it. This enhancement prevents unnecessary changes to the state of xp_cmdshell. The updated code now:

• Checks if xp_cmdshell is enabled using sp_configure.
• Executes the command if xp_cmdshell is already enabled, without altering its state.
• Enables xp_cmdshell only if it is disabled, executes the command, and then restores the original state by disabling it again.

Motivation: This change ensures that xp_cmdshell is not disabled after the execution if it was enabled initially, maintaining the target system's configuration integrity.

Dependencies: No new dependencies were introduced in this change.

Type of change

• New feature (non-breaking change which adds functionality)

How Has This Been Tested?

• Target with xp_cmdshell already enabled: Verified that the command executes without disabling xp_cmdshell.
• Target with xp_cmdshell disabled: Verified that the command enables xp_cmdshell, executes successfully, and restores the disabled state afterward.

Test Configuration:

• Python version: Python 3.11.9
• OS: Linux kali 6.6.9-amd64
• Target MSSQL version: Microsoft SQL Server 2022 (RTM) - 16.0.1000.6 (X64) Oct 8 2022
• Locally tested with a Windows 10 target running Microsoft SQL Server 2022

Screenshots:

xp_cmdshell disabled flow:

xp_cmdshell enabled flow:

[NeffIsBack]

Oh very nice! That was really needed, encountered the problem on a pentest myself. Thanks for the PR!