Pentester Academy – Abusing SQL Server Trusts in a Windows Domain
English | Tutorial | Size: 2.2GB
MS SQL Server is widely used in enterprise networks. Due to its use by third party applications, support for legacy applications and use as a database, SQL Server is a treasure trove for attackers. It gets integrated with in an active directory environment very well, which makes it an attractive target for abuse of features and privileges.
In this training, we will see that how to attack a SQL Server not only as an individual service but as a part of the enterprise network. We will discuss the mutual trust which SQL Server has with domain, users and how linked SQL Servers can be abused. We will perform enumeration and scanning, privilege escalation and post exploitation tasks like Domain Privilege Escalation, identifying juicy information, Command Execution, retrieving system secrets, lateral movement, persistence and more.
Course Syllabus:
SQL Server in Windows Domain
SQL Server Roles and Privileges
Introduction to PowerShell
Discovery, Enumeration and Scanning
Brute Force Attacks
Privilege Escalation
OS Command Execution
Retrieving System Secrets
Mapping and abusing domain trust
Lateral Movement
Database Links
Persistence
Identifying Juicy Information
Defenses
You will learn
Understanding SQL server and its domain integration
Discovering SQL servers with and without network port scanning
Attacking SQL servers
Performing OS Command Execution
Performing post exploitation tasks like Privilege Escalation, Trust abuse, retrieving system secrets, lateral movement and more
Attacking and accessing other SQL Servers from the foothold SQL Server
Defenses
RAPIDGATOR
rapidgator.net/file/f428f1db19f9e390021988885a81f105/Pentester_Academy_-_Abusing_SQL_Server_Trusts_in_a_Windows_Domain.part1.rar.html
rapidgator.net/file/cd4eaf6dfdafcb6cbf2deb1fc2c9e8b0/Pentester_Academy_-_Abusing_SQL_Server_Trusts_in_a_Windows_Domain.part2.rar.html
rapidgator.net/file/45e9e005b4fe61495692cb9535ffd04d/Pentester_Academy_-_Abusing_SQL_Server_Trusts_in_a_Windows_Domain.part3.rar.html
rapidgator.net/file/d6973b3654e7c2bc83f54220951b53e2/Pentester_Academy_-_Abusing_SQL_Server_Trusts_in_a_Windows_Domain.part4.rar.html
1DL
1dl.net/8066vchxgyce/Pentester_Academy_-_Abusing_SQL_Server_Trusts_in_a_Windows_Domain.part1.rar.html
1dl.net/h9lh1t5ecdqz/Pentester_Academy_-_Abusing_SQL_Server_Trusts_in_a_Windows_Domain.part2.rar.html
1dl.net/5t3p1gy30ohc/Pentester_Academy_-_Abusing_SQL_Server_Trusts_in_a_Windows_Domain.part3.rar.html
1dl.net/2316bmxa2kpu/Pentester_Academy_-_Abusing_SQL_Server_Trusts_in_a_Windows_Domain.part4.rar.html