Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

SQL Server Hacking on Scale Using PowerShell

via YouTube

Overview

Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only!
Explore SQL Server hacking techniques at scale using PowerShell in this 29-minute conference talk from Derbycon 2016. Dive into the PowerUpSQL project, covering SQL Server basics, account types, and server discovery methods. Learn to test login access, escalate privileges to sysadmin, and exploit service accounts. Examine advanced techniques like crawling database links and UNC path injection, complete with a live demonstration. Gain insights into post-exploitation strategies and receive general recommendations for securing SQL Server environments.

Syllabus

Intro
Presentation Overview
PowerUpSQL Overview: Project Goals
SQL Server Basics: Account Types
Find SQL Servers: Techniques
Testing Login Access: Overview
Testing Login Access: Command Examples
Escalating Privileges: Getting Sysadmin Privs
Escalating Privileges: SysAdmin to Service Account
Escalating Privileges: Shared Service Accounts
Escalating Privileges: Crawling Database Links
Escalating Privileges: UNC Path Injection
Escalating Privileges: DEMO
Post Exploitation: Overview
General Recommendations

Reviews

Start your review of SQL Server Hacking on Scale Using PowerShell

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.