mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. The first step is to execute code in the SQL Server process context. As extended stored procedures are going to be deprecated in future versions of MSSQL, we pay attention to Microsoft recommendations and thus, use CLR assemblies instead.
Features
- CLR assembly: Compile assembly.cs
- Core DLL: Compile reciclador.sln
- Client: mssqlclient.py (based on Impacket's example)
- You can compile the libraries or download them from releases (x64)
- Perform lateral movement in restricted environments
- The client requires impacket and sysadmin privileges on the SQL server
Project Samples
Categories
Post-Exploitation FrameworksLicense
MIT LicenseFollow mssqlproxy
Other Useful Business Software
Get Avast Free Antivirus with 24/7 AI-powered online scam detection
Award-winning antivirus protection, as well as protection against online scams, dangerous Wi-Fi connections, hacked accounts, and ransomware. It includes Avast Assistant, your built-in AI partner, which gives you help with suspicious online messages, offers, and more.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of mssqlproxy!