Exploitation

MSSQL Credential Capture via Forced Authentication

MSSQL Privilege Escalation via Impersonation

Exploit MSSQL IMPERSONATE privileges to escalate from low-privileged login to sysadmin by chaining user impersonation within database execution contexts.

MSSQL RCE via xp_cmdshell

Exploit MSSQL xp_cmdshell to achieve remote code execution, covering enablement via sp_configure, privilege requirements, and command execution techniques.