Skip to content
HackIndex.io

MSSQL:

Vulnerability Discovery

Find weak creds and dangerous MSSQL configs like xp_cmdshell

2 guides • Created Dec 28, 2025 • Updated Mar 29, 2026
2 guides

MSSQL Dangerous Configuration Checks

MSSQL Weak Credentials and Default SA Login

MSSQL vulnerability discovery identifies weak credentials, dangerous configurations, and missing patches. Default or guessable passwords on sa and application accounts are common, especially on development and staging instances.

Check for xp_cmdshell availability, enabled OLE Automation, TRUSTWORTHY databases, and excessive IMPERSONATE grants. Outdated MSSQL versions carry known remote code execution and privilege escalation CVEs that tools like Nessus and SQLRecon flag reliably.