MSSQL

• Impackets mssqlclient.py can be useful as a client to run mssql

• NMAP

  • sudo nmap --script ms-sql-info,ms-sql-empty-password,ms-sql-xp-cmdshell,ms-sql-config,ms-sql-ntlm-info,ms-sql-tables,ms-sql-hasdbaccess,ms-sql-dac,ms-sql-dump-hashes --script-args mssql.instance-port=1433,mssql.username=sa,mssql.password=,mssql.instance-name=MSSQLSERVER -sV -p 1433 10.129.201.248

• Metasploit

  • mssql_ping can be used to scan the mssql server

• Mssqlclient.py

  • impackets mssql client can be connnected by using

    • python3 mssqlclient.py Administrator@10.129.201.248 -windows-auth