<div style="margin:20px 0 0 200px"> To view the site, enable JavaScript by changing your browser options, then <a href="">Try Again</a>.</div>
  1. You are here:
  2. Home
  3. Knowledge
  4. Tools
  5. MSDAT - Microsoft SQL Database Attacking Tool

MSDAT - Microsoft SQL Database Attacking Tool

04 Jul, 2018
MSDAT - Microsoft SQL Database Attacking Tool

MSDAT (Microsoft SQL Database Attacking Tool) is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely.

Usage examples of MSDAT:
  • You have a Microsoft database listening remotely and you want to find valid credentials in order to connect to the database
  • You have a valid Microsoft SQL account on a database and you want to escalate your privileges
  • You have a valid Microsoft SQL account and you want to execute commands on the operating system hosting this DB (xp_cmdshell)

Download here: https://github.com/quentinhardy/msdat

Other Hacking Tools

Explore All Hacking Tools »
Pftriage - Python Tool And Library To Help Analyze Files During Malware Triage And Analysis
Pftriage - Python Tool And Library To Help Analyze Files During Malware Triage And Analysis
Read Details »
ADAPT - Tool That Performs Automated Penetration Testing For WebApps
ADAPT - Tool That Performs Automated Penetration Testing For WebApps
Read Details »
Stardox - Github Stargazers Information Gathering Tool
Stardox - Github Stargazers Information Gathering Tool
Read Details »
Modlishka - The Tool That Can Bypass Two-Factor Authentication Via Phishing
Modlishka - The Tool That Can Bypass Two-Factor Authentication Via Phishing
Read Details »
Stretcher - Tool Designed To Help Identify Open Elasticsearch Servers That Are Exposing Sensitive Information
Stretcher - Tool Designed To Help Identify Open Elasticsearch Servers That Are Exposing Sensitive Information
Read Details »
Brosec – An Open Source Interactive Tool to Utilize Payloads and Commands
Brosec – An Open Source Interactive Tool to Utilize Payloads and Commands
Read Details »
SpiderFoot - The Most Complete OSINT Collection And Reconnaissance Tool
SpiderFoot - The Most Complete OSINT Collection And Reconnaissance Tool
Read Details »
Knock - Open Source Subdomain Scanner Tool
Knock - Open Source Subdomain Scanner Tool
Read Details »
PhishX - Spear Phishing Tool for Capturing Credentials
PhishX - Spear Phishing Tool for Capturing Credentials
Read Details »
Atlas - Quick SQLMap Tamper Suggester
Atlas - Quick SQLMap Tamper Suggester
Read Details »
XenoScan - Open Source Memory Scanner Written In C++
XenoScan - Open Source Memory Scanner Written In C++
Read Details »
Ettercap - A Comprehensive Suite For Man In The Middle Attacks
Ettercap - A Comprehensive Suite For Man In The Middle Attacks
Read Details »
BadKarma - Advanced Network Reconnaissance Toolkit
BadKarma - Advanced Network Reconnaissance Toolkit
Read Details »
XAttacker Tool – Scan and Auto Exploit Web Vulnerabilities
XAttacker Tool – Scan and Auto Exploit Web Vulnerabilities
Read Details »
PMapper - A Tool For Quickly Evaluating IAM Permissions In AWS
PMapper - A Tool For Quickly Evaluating IAM Permissions In AWS
Read Details »
Ridrelay - Quick And Easy Way To Get Domain Usernames While On An Internal Network
Ridrelay - Quick And Easy Way To Get Domain Usernames While On An Internal Network
Read Details »
PhpSploit - Stealth Post-Exploitation Framework
PhpSploit - Stealth Post-Exploitation Framework
Read Details »
PE Linux - Linux Privilege Escalation Tool
PE Linux - Linux Privilege Escalation Tool
Read Details »
VOOKI - Web Application Vulnerability Scanner
VOOKI - Web Application Vulnerability Scanner
Read Details »
Black Owl - Tool To Gather Information, based On Operative-Framework
Black Owl - Tool To Gather Information, based On Operative-Framework
Read Details »
MSDAT - Microsoft SQL Database Attacking Tool
MSDAT - Microsoft SQL Database Attacking Tool
Read Details »
Autopwn v2.0 : Metasploit Automation Tool
Autopwn v2.0 : Metasploit Automation Tool
Read Details »
GPON - Python Exploit For Remote Code Executuion On GPON Home Routers (CVE-2018-10562)
GPON - Python Exploit For Remote Code Executuion On GPON Home Routers (CVE-2018-10562)
Read Details »
Mimic - A Tool For Covert Execution In Linux
Mimic - A Tool For Covert Execution In Linux
Read Details »
Aircrack - the password cracking tool
Aircrack - the password cracking tool
Read Details »
CLOUDKiLL3R - Bypasses Cloudflare Protection Service Via TOR Browser
CLOUDKiLL3R - Bypasses Cloudflare Protection Service Via TOR Browser
Read Details »
VoIP Sniffer: UCSniff
VoIP Sniffer: UCSniff
Read Details »
OWASP ZSC – Obfuscated Code Generator Tool
OWASP ZSC – Obfuscated Code Generator Tool
Read Details »
Sublist3r – Fast Python Subdomain Enumeration Tool
Sublist3r – Fast Python Subdomain Enumeration Tool
Read Details »
Acunetix WVS
Acunetix WVS
Read Details »
Wireshark: Web vulnerability scanner
Wireshark: Web vulnerability scanner
Read Details »
UFTP - UDP based FTP with encryption
UFTP - UDP based FTP with encryption
Read Details »
Android hacking 'APK'
Android hacking 'APK'
Read Details »
Executable Compression demystified
Executable Compression demystified
Read Details »
BitCracker – Password Cracking Tool
BitCracker – Password Cracking Tool
Read Details »
BloodHound – Red / Blue teaming tool for AD attacks
BloodHound – Red / Blue teaming tool for AD attacks
Read Details »
>
<

Exclusive Blog

Read All Exclusive Blog »
A few tips for the perfect homework
A few tips for the perfect homework

With world working from home, it's time to make it enjoyable and effective.

Read Details

Breaking News

Breaking News Of Each Month »
Cyber Scam in the days of Coronavirus & Lockdown
Cyber Scam in the days of Coronavirus & Lockdown

The recent pandemic was unexpected and unknown to most part of the world. It has changed our life and we are slowly adapting to our new lifestyle. The risks associated with the new lifestyle, both personal & corporate, are unknown to most of us.

Read Details