• Microsoft SQL (MSSQL) is Microsoft's SQL-based relational database management system.
• SQL Server Management Studio (SSMS) is a tool used to manage databases. It can be installed on any computer, not just the server hosting the database. SSMS may save login details to make it easier to connect to the database. If someone gains access to a computer with SSMS and those saved details, they could access the database without permission.

Many other clients can be used to access a database running on MSSQL. Including but not limited to:

Footprinting the Service

Nmap

• NMAP has default mssql scripts that can be used to target the default tcp port 1433 that MSSQL listens on.
• NMAP MSSQL Script Scan
• sudo nmap --script ms-sql-info,ms-sql-empty-password,ms-sql-xp-cmdshell,ms-sql-config,ms-sql-ntlm-info,ms-sql-tables,ms-sql-hasdbaccess,ms-sql-dac,ms-sql-dump-hashes --script-args mssql.instance-port=1433,mssql.username=sa,mssql.password=,mssql.instance-name=MSSQLSERVER -sV -p 1433 10.129.201.248

MSSQL Ping in Metasploit

• auxiliary(scanner/mssql/mssql_ping) - Scan MSSQL service

Connecting with Mssqlclient.py

• python3 mssqlclient.py Administrator@10.129.201.248 -windows-auth

ChatGPT