Skip to content
HackIndex logo

HackIndex

MSSQL
Service

MSSQL

MSSQL is Microsoft's relational DB server. Attackers enumerate instances, exploit weak creds and xp_cmdshell for RCE, escalate to SYSTEM, pivot via linked servers, and exfiltrate stored data

:1433 10 guides 6 phases
1 min read Updated: Jul 14, 2026

What is MSSQL?

Microsoft SQL Server is Microsoft’s enterprise database platform with tight Windows integration.

Common security issues

  • Weak sa or admin credentials.

  • xp_cmdshell or unsafe features enabled.

  • Windows authentication exploitation.

  • SQL injection from apps.

  • Linked server abuse.

Default ports

  • 1433

Enumeration

Enumerate MSSQL using nmap, nxc, and impacket for DB info

1

Vulnerability Discovery

Find weak creds and dangerous MSSQL configs like xp_cmdshell

2

Exploitation

RCE, privilege escalation, and credential capture via MSSQL

3

MSSQL RCE via xp_cmdshell

Exploit MSSQL xp_cmdshell to achieve remote code execution, covering enablement via sp_configure, privilege requirements, and command execution techniques.

Mar 26, 2026 • 3 min read

Post-Exploitation

Pillage DBs, dump password hashes, and loot stored credentials

2

MSSQL Credential Dump

Techniques for extracting credentials from MSSQL databases post-compromise, including sa accounts, linked server passwords, and stored connection strings.

May 15, 2026 • 4 min read

MSSQL Database Pillaging

Techniques for extracting credentials, data, and secrets from compromised MSSQL instances, including linked servers, agent jobs, and stored procedures.

May 15, 2026 • 4 min read

Privilege Escalation

Escalate MSSQL sysadmin to SYSTEM via Agent Jobs

1

Lateral Movement

Move laterally via MSSQL linked servers using OPENQUERY and AT

1