MSSQL Server

:warning: Content of this page has been moved to InternalAllTheThings/cheatsheets/mssql-server-cheatsheet

• Tools
• Identify Instances and Databases
  • Discover Local SQL Server Instances
  • Discover Domain SQL Server Instances
  • Discover Remote SQL Server Instances
  • Identify Encrypted databases
  • Version Query
• Identify Sensitive Information
  • Get Tables from a Specific Database
  • Gather 5 Entries from Each Column
  • Gather 5 Entries from a Specific Table
  • Dump common information from server to files
• Linked Database
  • Find Trusted Link
  • Execute Query Through The Link
  • Crawl Links for Instances in the Domain
  • Crawl Links for a Specific Instance
  • Query Version of Linked Database
  • Execute Procedure on Linked Database
  • Determine Names of Linked Databases
  • Determine All the Tables Names from a Selected Linked Database
  • Gather the Top 5 Columns from a Selected Linked Table
  • Gather Entries from a Selected Linked Column
• Command Execution via xp_cmdshell
• Extended Stored Procedure
  • Add the extended stored procedure and list extended stored procedures
• CLR Assemblies
  • Execute commands using CLR assembly
  • Manually creating a CLR DLL and importing it
• OLE Automation
  • Execute commands using OLE automation procedures
• Agent Jobs
  • Execute commands through SQL Agent Job service
  • List All Jobs
• External Scripts
  • Python
  • R
• Audit Checks
  • Find and exploit impersonation opportunities
• Find databases that have been configured as trustworthy
• Manual SQL Server Queries
  • Query Current User & determine if the user is a sysadmin
  • Current Role
  • Current DB
  • List all tables
  • List all databases
  • All Logins on Server
  • All Database Users for a Database
  • List All Sysadmins
  • List All Database Roles
  • Effective Permissions from the Server
  • Effective Permissions from the Database
  • Find SQL Server Logins Which can be Impersonated for the Current Database
  • Exploiting Impersonation
  • Exploiting Nested Impersonation
  • MSSQL Accounts and Hashes
• References