https://www.hackingarticles.in/mssql-for-pentester-command-execution-with-xp_cmdshell/
MSSQL for Pentester: Command Execution with xp_cmdshell