MSSqlPwner

MSSqlPwner MSSqlPwner is an advanced and versatile pentesting tool designed to seamlessly interact and pwn MSSQL servers. That tool is based on impacket, which allows attackers to authenticate to databases using clear-text passwords NTLM Hashes, and kerberos tickets. With MSSqlPwner, users can...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

sqlwinds

SQLWinds SQL 安全评估与后渗透工具包 SQLWinds 是一款用于对 Microsoft SQL Server 进行安全测试与利用的命令行工具。它提供了一个交互式环境，可深度分析服务器、提升权限、执行攻击并在网络中横向移动，同时配备用于内存代码执行和 SCCM 数据库探测等任务的专用命令。 📖 文档与资源 快速链接： 完整文档与 Wiki - 完整使用指南和命令参考 报告问题 - 发现了 Bug 或有功能请求？ 最新版本 - 下载最新版本 功能特性 多种身份验证： 支持 SQL、Windows 集成（--integrated）和 Kerberos 委派（--kerberos...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

ms-sql-config NSE Script

Queries Microsoft SQL Server ms-sql instances for a list of databases, linked servers, and configuration settings. SQL Server credentials required: Yes use ms-sql-brute, ms-sql-empty-password and/or mssql.username & mssql.password Run criteria: Host script: Will run if the mssql.instance-all,...