# Post-Exploitation

> Pillage DBs, dump password hashes, and loot stored credentials

- **URL:** https://hackindex.io/services/mssql/post-exploitation
- **Service:** [MSSQL](https://hackindex.io/services/mssql.md)
- **Tags:** control, enumerate-internal
- **Published:** 2026-05-15
- **Updated:** 2026-05-15

MSSQL post-exploitation focuses on extracting credentials and sensitive data from a compromised instance. System tables store password hashes, and application databases often contain plaintext credentials, API keys, and connection strings.

SQL Server Agent jobs may contain scheduled commands and stored credentials. Reviewing job history, linked server passwords, and database mail configurations reveals additional accounts and lateral movement paths across the environment.

## Guides

- [MSSQL Credential Dump](https://hackindex.io/services/mssql/post-exploitation/mssql-credential-dump.md): Techniques for extracting credentials from MSSQL databases post-compromise, including sa accounts, linked server passwords, and stored connection strings.
- [MSSQL Database Pillaging](https://hackindex.io/services/mssql/post-exploitation/mssql-database-pillaging.md): Techniques for extracting credentials, data, and secrets from compromised MSSQL instances, including linked servers, agent jobs, and stored procedures.