mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. The first step is to execute code in the SQL Server process context. As extended stored procedures are going to be deprecated in future versions of MSSQL, we pay attention to Microsoft recommendations and thus, use CLR assemblies instead.
Features
- CLR assembly: Compile assembly.cs
- Core DLL: Compile reciclador.sln
- Client: mssqlclient.py (based on Impacket's example)
- You can compile the libraries or download them from releases (x64)
- Perform lateral movement in restricted environments
- The client requires impacket and sysadmin privileges on the SQL server
Project Samples
Categories
Post-Exploitation FrameworksLicense
MIT LicenseFollow mssqlproxy
Other Useful Business Software
Next-Gen Encryption for Post-Quantum Security | CLEAR by Quantum Knight
CLEAR by Quantum Knight is a FIPS-140-3 validated encryption SDK engineered for enterprises requiring top-tier security. Offering robust post-quantum cryptography, CLEAR secures files, streaming media, databases, and networks with ease across over 30 modern platforms. Its compact design, smaller than a single smartphone image, ensures maximum efficiency and low energy consumption.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of mssqlproxy!
