MSSQL Pentesting with NetExec (nxc)
Techniques Covered in This Guide:
- Lab Setup
- Password Spraying (Users & Hashes)
- Authentication Testing (Local & Windows)
- MSSQL Query Execution
- Command Execution via xp_cmdshell
- Pass-the-Hash Attacks
- File Upload & Download
- Privilege Escalation (mssql_priv)
- Enumeration on Custom Ports