SQLRecon
SQLRecon copied to clipboard
skahwah
A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
Hey there, first things first: Great tool :) I would suggest the following features to make it even better: - output to json file - ability to use credentials for...
Hi @skahwah 👋 I find the work you've done on this tool pretty consistent and since I found a few features missing, instead of awarding it minus points in my...
Current functionality in SQLRecon does not support the execution of queries or commands across multiple linked servers in a chain. This limitation restricts the ability to perform reconnaissance or execute...
This should also be integrated as a check in the ADSI and CLR modules `EXEC sp_serveroption 'SQLSERVEr', 'DATA ACCESS', TRUE` `EXEC sp_serveroption 'SQLSERVEr', 'DATA ACCESS', FALSE`
There is currently an issue where any RPC queries that have an `AT` statement will fail on the destination server if the supplied hostname is a FQDN and not a...
Added two new SCCM modules focused on the retrieval of scripts, which can contain various pieces of credential data or otherwise sensitive information: -scriptdata: Returns all scripts created within SCCM....
First, thank you for SQLRecon and its great documentation. We used it on a recent Red Team engagement with great success. ### Issue Uploading even a small (2–3 MB) DLL...
