MSSQL command
Execute MSSQL command using CrackMapExec
cme mssql 10.10.10.52 -u admin -p '[email protected][email protected]!' --local-auth -q 'SELECT name FROM master.dbo.sysdatabases;'
Expected Results:
MSSQL 10.10.10.52 1433 None [+] admin:[email protected][email protected]! (Pwn3d!)MSSQL 10.10.10.52 1433 None nameMSSQL 10.10.10.52 1433 None --------------------------------------------------------------------------------------------------------------------------------MSSQL 10.10.10.52 1433 None masterMSSQL 10.10.10.52 1433 None tempdbMSSQL 10.10.10.52 1433 None modelMSSQL 10.10.10.52 1433 None msdbMSSQL 10.10.10.52 1433 None orcharddb
When playing with MSSQL, you can use the tool MSDAT from quentinhardy​
Mantis machine is a good example to test MSSQL procotol with CrackMapExec
​
Last updated 11 months ago