MSSQL:
Exploitation
RCE, privilege escalation, and credential capture via MSSQL
3 guides
•
Updated Mar 29, 2026
MSSQL Privilege Escalation via Impersonation
Exploit MSSQL IMPERSONATE privileges to escalate from low-privileged login to sysadmin by chaining user impersonation within database execution contexts.
MSSQL RCE via xp_cmdshell
Exploit MSSQL xp_cmdshell to achieve remote code execution, covering enablement via sp_configure, privilege requirements, and command execution techniques.