msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin Corrupción de Memoria mediante Inyección SQL Se puede producir un desbordamiento de búfer en el montón al llamar al procedimiento almacenado extendido no documentado "spreplwritetovarbin". Esta vulnerabilidad afecta a todas las versiones de...

MSSQLand

✈️ MSSQLand Land gracefully in your target Microsoft SQL Server MS SQL DBMS, as if arriving on a business-class flight with a champagne glass in hand. 🥂 MSSQLand is a C Microsoft SQL Server MSSQL / MS SQL post-exploitation tool built for red team operators. Designed to run inside the target...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

CVE-2019-1068

CVE-2019-1068 Análisis de causa raíz y PoC para una vulnerabilidad de desbordamiento de pila en Microsoft SQL Server mediante la ingeniería inversa de “svl.dll”. Enlaces a nuestro trabajo: 1. Ataberk's Blog 2. Fatih's Blog 3. Cem's Blog...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool es una herramienta de pruebas de penetración de código abierto que prueba la seguridad de las bases de datos Microsoft SQL de forma remota. Ejemplos de uso de MSDAT: Tiene una ba...

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM Inyección SQL a RCE Resumen CVE-2024-50330 es una vulnerabilidad de inyección SQL crítica sin autenticación previa en Ivanti Endpoint Manager EPM que permite a un atacante remoto no autenticado lograr la ejecución remota de código en el servidor objetiv...

CVE-2025-24999

CVE-2025-24999 proof of concept for CVE-2025-24999 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...

Microsoft SQL Server Denial of Service Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...