sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

MSSQLand

✈️ MSSQLand Land gracefully in your target Microsoft SQL Server MS SQL DBMS, as if arriving on a business-class flight with a champagne glass in hand. 🥂 MSSQLand is a C Microsoft SQL Server MSSQL / MS SQL post-exploitation tool built for red team operators. Designed to run inside the target...

CVE-2019-1068

CVE-2019-1068 通过逆向“svl.dll”对Microsoft SQL Server栈溢出漏洞进行根因分析并提供PoC。 关于我们工作的链接： 1. Ataberk的博客 2. Fatih的博客 3. Cem的博客 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool は、リモートで Microsoft SQL データベースのセキュリティをテストするオープンソースのペネトレーションテストツールです。 MSDAT の使用例： リモートで Microsoft データベースが待受中であり、データベースに接続するための 有効な認証情報 を見つけたい場合 データベース上で有効な Microsoft SQL...

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server の spreplwritetovarbin における SQL インジェクションを介したメモリ破損 未文書化の拡張ストアドプロシージャ "spreplwritetovarbin" を呼び出すと、ヒープベースのバッファオーバーフローが発生する可能性があります。この脆弱性は、MS09-004 で提供された更新プログラムを適用していない、Microsoft SQL Server 2000 および 2005、Windows Internal Database、Microsoft Desktop Engine MSDE...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL注入到远程代码执行 概述 CVE-2024-50330 是 Ivanti Endpoint Manager EPM 中存在的一个严重 的预认证 SQL 注入漏洞，允许远程未认证攻击者在目标服务器上实现远程代码执行。该漏洞已于2024年11月的安全更新中披露并修复。 技术细节 CVE ：CVE-2024-50330 CWE ：CWE-89（SQL注入） CVSS ：严重（CVSS 3.x 评分约9.8） 攻击向量 ：网络 认证 ：不需要 影响 ：远程代码执行 该漏洞存在于 Ivanti EPM W...

CVE-2025-24999

CVE-2025-24999 CVE-2025-24999 的概念验证 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Denial of Service Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Denial of Service Vulnerability

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...