Mssql Server Cheatsheet

⚠️ Content of this page has been moved to InternalSecurityResources/cheatsheets/mssql-server-cheatsheet

• Tools

• Identify Instances and Databases

  • Discover Local SQL Server Instances

  • Discover Domain SQL Server Instances

  • Discover Remote SQL Server Instances

  • Identify Encrypted databases

  • Version Query

• Identify Sensitive Information

  • Get Tables from a Specific Database

  • Gather 5 Entries from Each Column

  • Gather 5 Entries from a Specific Table

  • Dump common information from server to files

• Linked Database

  • Find Trusted Link

  • Execute Query Through The Link

  • Crawl Links for Instances in the Domain

  • Crawl Links for a Specific Instance

  • Query Version of Linked Database

  • Execute Procedure on Linked Database

  • Determine Names of Linked Databases

  • Determine All the Tables Names from a Selected Linked Database

  • Gather the Top 5 Columns from a Selected Linked Table

  • Gather Entries from a Selected Linked Column

• Command Execution via xp_cmdshell

• Extended Stored Procedure

  • Add the extended stored procedure and list extended stored procedures

• CLR Assemblies

  • Execute commands using CLR assembly

  • Manually creating a CLR DLL and importing it

• OLE Automation

  • Execute commands using OLE automation procedures

• Agent Jobs

  • Execute commands through SQL Agent Job service

  • List All Jobs

• External Scripts

  • Python

  • R

• Audit Checks

  • Find and exploit impersonation opportunities

• Find databases that have been configured as trustworthy

• Manual SQL Server Queries

  • Query Current User & determine if the user is a sysadmin

  • Current Role

  • Current DB

  • List all tables

  • List all databases

  • All Logins on Server

  • All Database Users for a Database

  • List All Sysadmins

  • List All Database Roles

  • Effective Permissions from the Server

  • Effective Permissions from the Database

  • Find SQL Server Logins Which can be Impersonated for the Current Database

  • Exploiting Impersonation

  • Exploiting Nested Impersonation

  • MSSQL Accounts and Hashes

• References