What is SQL Server CLR?
What is SQL Server CLR? SQL CLR or SQLCLR (SQL Common Language Runtime) is technology for hosting of the Microsoft . NET common language runtime engine within SQL Server. The SQLCLR allows managed code to be hosted by, and run in, the Microsoft SQL Server environment.
What is sp_OACreate?
1) sp_OACreate
This object token will identify the created OLE object and will be used to call the other OLE Automation stored procedures.
How do I enable OLE automation procedures?
By default, SQL Server blocks access to OLE Automation stored procedures because this component is turned off as part of the security configuration for this server. A system administrator can enable access to OLE Automation procedures by using sp_configure.
What is SQL Server OLE automation?
SQL Server “OLE Automation Procedures” enables the SQL Server to leverage OLE to interact with other COM objects. Data security-wise, this increases the attack surface. There are excellent examples out there for leveraging COM objects to perform lateral movement.
