module

Windows Gather Local SQL Server Hash Dump

Disclosed
N/A
Created
May 30, 2018

Description

This module extracts the usernames and password
hashes from an MSSQL server and stores them as loot. It uses the
same technique in mssql_local_auth_bypass.

Authors

Mike Manzotti [email protected]
nullbind

Platform

Windows

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use post/windows/gather/credentials/mssql_local_hashdump
msf post(mssql_local_hashdump) > show actions
...actions...
msf post(mssql_local_hashdump) > set ACTION < action-name >
msf post(mssql_local_hashdump) > show options
...show and set options...
msf post(mssql_local_hashdump) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.