Description

  • Microsoft SQL relational database system
  • SQL Server Management Studio (SSMS) is a client-side application aids in management of databases. Other clients include mssqli-cli, SQL Server PowerShell, HeidiSQL, etc.

Port

  • Port 1433

Interaction / Commands

python3 mssqlclient.py Administrator@IP_Address -windows-auth

Footprinting

sudo nmap --script ms-sql-info,ms-sql-empty-password,ms-sql-xp-cmdshell,ms-sql-config,ms-sql-ntlm-info,ms-sql-tables,ms-sql-hasdbaccess,ms-sql-dac,ms-sql-dump-hashes --script-args mssql.instance-port=1433,mssql.username=sa,mssql.password=,mssql.instance-name=MSSQLSERVER -sV -p 1433 IP_Address
  • Can also use Metasploit auxiliary module called mssql_ping