MSSQL | bokkapig

grep -l "MSSQL" ./machines [2]

Overwatch medium windows 2026-01-24 Windows AD DC with anonymous SMB share leaking .NET app credentials, MSSQL linked server DNS poisoning for credential capture, and WCF SOAP service command injection for SYSTEM access. active directorymssqlwcfcommand injectiondns poisoninglinked server+1

Eighteen easy windows 2025-11-15 Windows Server 2025 DC with MSSQL impersonation leading to credential extraction, password spray for WinRM access, and BadSuccessor dMSA privilege escalation to Domain Admin. mssqlsql impersonationpbkdf2dmsabadsuccessoractive directory+1