ignitetechnologies/mssql-pentest-cheatsheetPractical MSSQL penetration testing cheat sheet covering enumeration, linked-server pivoting, privilege escalation, persistence, and command execution via xp_cmdshell, CLR, and OLE automation.
🗄️ MSSQL Pentest Cheatsheet
A practical Microsoft SQL Server penetration testing cheat sheet designed for penetration testers, red teamers, and cybersecurity learners to understand how to enumerate, exploit, and abuse misconfigured MSSQL databases during security assessments.
🔵 Telegram – Join Channel
⚫ Twitter/X – Follow Us
🟣 Discord – Join Server
💼 LinkedIn – Follow HackingArticles
🚀 Join Our Cybersecurity Training Program
Hands-on training in Penetration Testing, Red Teaming, and Cybersecurity.
| # | Topic | Description | Article |
|---|---|---|---|
| 1 | 🔄 Stored Procedures Persistence | Maintain persistence on MSSQL servers using stored procedures | Read Article |
| 2 | 🔗 Abusing Linked Database | Exploit linked database configurations to pivot across MSSQL servers | Read Article |
| 3 | ⚙️ Abusing Trustworthy | Abuse the TRUSTWORTHY database property to escalate privileges | Read Article |
| 4 | 🧠 Command Execution with External Scripts | Execute system commands via MSSQL external scripting features | Read Article |
| 5 | 🎭 Impersonate | Abuse impersonation privileges to escalate database access | Read Article |
| 6 | 🚀 Metasploit | Exploit MSSQL services using Metasploit modules | Read Article |
| 7 | 🧩 Command Execution with CLR Assembly | Execute arbitrary code through custom CLR assemblies | Read Article |
| 8 | ⚡ Command Execution with OLE Automation | Execute OS commands using OLE Automation procedures | Read Article |
| 9 | 🔍 Discovery | Discover MSSQL services and configurations during reconnaissance | Read Article |
| 10 | 💻 Command Execution with xp_cmdshell | Execute operating system commands via xp_cmdshell | Read Article |
| 11 | 📡 MSSQL Enumeration with Nmap | Discover and enumerate MSSQL services using Nmap scripts | Read Article |
| 12 | 🔐 Hashing | Extract and analyze password hashes stored in MSSQL | Read Article |
| 13 | 🛠️ Extended Stored Procedures | Execute commands using extended stored procedures | Read Article |
| 14 | 📂 Extracting Juicy Information | Extract sensitive information from MSSQL databases | Read Article |
| 15 | 🧪 MSSQL Lab Setup | Create a lab environment to practice MSSQL penetration testing | Read Article |
