Invoke SQLServer Persist TriggerDDL

Invoke-SqlServer-Persist-TriggerDDL.psm1 is a script that can be used for backdoor a Windows system using a SQL Server DDL event triggers. As a result, the associated TSQL will execute when any DDL_SERVER_LEVEL_EVENTS occur.

This script supports the executing operating system and PowerShell commands as the SQL Server service account using the native xp_cmdshell stored procedure. The script also supports add a new sysadmin. This script can be run as the current Windows user or a SQL Server login can be provided.

Note: This script requires sysadmin privileges.

More info, visit here.

Download