Skip to main content

​
mssql

Microsoft SQL Server operations.

​
Usage

r4t mssql [flags]
Status: Base command registered. Subcommands are not yet implemented.
MSSQL support is planned for authentication testing, instance enumeration via AD SPN lookups, query execution, and xp_cmdshell exploitation. When implemented, it will use the global authentication flags against targets on port 1433. MSSQL instance discovery via SPN lookup is available now through: 
r4t ldap get spn
# or
r4t adws get users --attrs servicePrincipalName
Filter for SPNs containing MSSQLSvc/ to identify SQL servers. Password spraying against MSSQL is planned via spray mssql.