Exploiting MSSQL

author: Nathan Acks
date: 2022-07-10

• slyth11907 / Cheatsheets
• Using Metasploit
• Using “nmap”

Metasploit

• auxiliary/scanner/mssql/mssql_ping - Discover MSSQL servers (alternatively, use --script=ms-sql-info with nmap).
• auxiliary/scanner/mssql/mssql_login - Brute force logins.
• auxiliary/admin/mssql/mssql_enum - Enumerate databases.
• exploit/windows/mssql/mssql_payload - Get a shell.