+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: Exploit MSSQL Server Using Kali Linux Metasploit 5 (/showthread.php?tid=5965682)
Exploit MSSQL Server Using Kali Linux Metasploit 5 - peterboss - May 1, 2019
I've been trying to exploit a remote MSSQL Server with the help of Metasploit 5 In Kali Linux.
I got following information from the server:
Image Here: i.imgur*com/lH5xVzG.png (I'm New User And Not Allowed To Add Images ;(
My Questions:
1. The origin IP of website server is : XX.XXX.XX.68
But, Terminal got SQL information from IP: XX.XXX.XX.156 ......How and Why?
2. How I can proceed further to gain access to the MSSQL Server?
Thanks (New To MSSQL Exploit)
RE: Exploit MSSQL Server Using Kali Linux Metasploit 5 - shelled - May 1, 2019
Maybe don't use metasploit and understand if the mssql server is vulnerable.
RE: Exploit MSSQL Server Using Kali Linux Metasploit 5 - jionglaopi - May 2, 2019
Two independent server(1.webserver 2.database server)
RE: Exploit MSSQL Server Using Kali Linux Metasploit 5 - 4444lastgamer - May 3, 2019
it's lol question, if you wanna try to hack mysql server then u hv to know if mysql server hv a vulnerability or not
RE: Exploit MSSQL Server Using Kali Linux Metasploit 5 - nullcult - May 21, 2019
(May 1, 2019 07:08 AM)peterboss Wrote: I've been trying to exploit a remote MSSQL Server with the help of Metasploit 5 In Kali Linux.
I got following information from the server:
Image Here: i.imgur*com/lH5xVzG.png (I'm New User And Not Allowed To Add Images ;(
My Questions:
1. The origin IP of website server is : XX.XXX.XX.68
But, Terminal got SQL information from IP: XX.XXX.XX.156 ......How and Why?
2. How I can proceed further to gain access to the MSSQL Server?
Thanks (New To MSSQL Exploit)
Hi mate, not every MSSQL server will have ready vulnerabilities for you to exploit. Some times you need to look into things like misconfigurations.
1. Enumerate both smb and mssql usernames on your box.
2. Try bruteforce with common names.
3. Look into PowerSQL
RE: Exploit MSSQL Server Using Kali Linux Metasploit 5 - Last_viking - May 22, 2019
I'd suggest you to run nmap scan against the host.
And note down the version or build date
MySQL version 1.0.x has remote backdoor upload vulnerability
RE: Exploit MSSQL Server Using Kali Linux Metasploit 5 - icebreacker - May 22, 2019
Hello ,
if you have the IP you can brute force the login .
Login: sa
Pass:whatever
Metasploit:
use auxiliary/scanner/mssql/mssql_login
set RHOSTS '127.0.0.1' =your_ip
set username 'sa' =sa=Admin Account for MSSQL_SERVER
set PASS_FILE 'massive_pwd_list.txt' =your PWDLISTE
set STOP_ON_SUCCESS 'true' =PASSWORD GOOD its stopping
set THREADS '5' =its the speed
run =start the tool
Best Regards .