Exploiting MSSQL

• author:: Nathan Acks
• date:: 2022-07-10

Metasploit

• auxiliary/scanner/mssql/mssql_ping - Discover MSSQL servers (alternatively, use --script=ms-sql-info with nmap).
• auxiliary/scanner/mssql/mssql_login - Brute force logins.
• auxiliary/admin/mssql/mssql_enum - Enumerate databases.
• exploit/windows/mssql/mssql_payload - Get a shell.

References

• slyth11907 / Cheatsheets
• Using Metasploit
• Using “nmap”