sync

DBG - get all tables size.sql

@@ -23,5 +23,4 @@ WHERE t.name NOT LIKE 'dt%'
 GROUP BY t.name,
          s.name,
          p.rows
-ORDER BY p.rows DESC,
+ORDER BY [TotalSpaceMB] DESC 
-         t.name;

EXPLOIT - active agent mail system.sql

@@ -0,0 +1,6 @@
+USE [msdb]
+GO
+EXEC msdb.dbo.sp_set_sqlagent_properties @email_save_in_sent_folder=1, 
+		@databasemail_profile=N'APSSQL_MAIL_PROFILE', 
+		@use_databasemail=1
+GO

EXPLOIT - give profiler rights to a person.sql

@@ -0,0 +1,16 @@
+	
+DECLARE @temptable TABLE ( [account name] nvarchar(128), [type] varchar(8), [privilege] varchar(8), [mapped login name] nvarchar(128), [permission path] nvarchar(128) )
+DECLARE @q NVARCHAR(4000)='';
+
+INSERT INTO @temptable ([account name],
+                        type,
+                        privilege,
+                        [mapped login name],
+                        [permission path])
+EXEC xp_logininfo 'centralinfra\ucilmlambt_adm','all';
+
+SELECT TOP(1) @q = 'GRANT ALTER TRACE TO ['+[permission path]+'];'
+FROM @temptable
+
+PRINT @q;
+PRINT REPLACE(@q,'GRANT', 'REVOKE');