Attacking SQL Databases

MSSQL

  • Default port = 1433/1434
  • 'hidden mode' port = 2433

Connect to server with mssqlclient

mssqlclient.py -p 1433 julio@10.129.203.7 

Connect to server with sqsh

sqsh -S 10.129.203.7 -U julio -P 'MyPassword!' -h