https://www.hackingarticles.in/mssql-for-pentester-command-execution-with-extended-stored-procedures/
MSSQL for Pentester: Command Execution with Extended Stored Procedures