MSSQL Commands

7 MSSQL commands from the Lateral Movement category, each with its placeholders, supported authentication methods and upstream references.

Tools covered: impacket-mssqlclient, mssqlpwner, nxc

• Impacket MSSQLClient Interactive MSSQL shell for command execution and database access
• MSSQLPwner Linked Server Abuse Enumerate and abuse MSSQL linked servers for lateral movement
• NetExec MSSQL Command Exec Execute OS commands through MSSQL — auto-enables xp_cmdshell if disabled and the account has sufficient…
• NetExec MSSQL Enable CmdShell Enable xp_cmdshell on a MSSQL server for OS command execution
• NetExec MSSQL Linked Servers Enumerate MSSQL linked servers for lateral movement opportunities
• NetExec MSSQL Privilege Check Enumerate and escalate MSSQL server privileges (sysadmin, impersonation, linked servers)
• NetExec MSSQL xp_cmdshell Execute OS commands via MSSQL xp_cmdshell using NetExec