Hacking Tools

MSDAT - Microsoft SQL Database Attacking Tool

MSDAT (Microsoft SQL Database Attacking Tool) is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely.

Usage examples of MSDAT:

• You have a Microsoft database listening remotely and you want to find valid credentials in order to connect to the database
• You have a valid Microsoft SQL account on a database and you want to escalate your privileges
• You have a valid Microsoft SQL account and you want to execute commands on the operating system hosting this DB (xp_cmdshell)

Download here: https://github.com/quentinhardy/msdat