CmdID

CmdID / Commands

nxc-mssql

Pentest and exploit Microsoft SQL servers. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Search for valid credentials by trying out every combination in the specified lists of usernames and passwords

nxc mssql 192.168.178.2 --username path/to/usernames.txt --password path/to/passwords.txtIdentify

Execute the specified SQL query on the target server

nxc mssql 192.168.178.2 --username username --password password --query 'SELECT * FROM sys.databases;'Identify

Execute the specified shell command on the target server through MSSQL

nxc mssql 192.168.178.2 --username username --password password -x whoamiIdentify

Execute the specified PowerShell command on the target server through MSSQL without retrieving output

nxc mssql 192.168.178.2 --username username --password password -X whoami --no-outputIdentify

Download a remote file from the target server and store it in the specified location

nxc mssql 192.168.178.2 --username username --password password --get-file C:\path\to\remote_file path/to/local_fileIdentify

Upload a local file to the specified location on the target server

nxc mssql 192.168.178.2 --username username --password password --put-file path/to/local_file C:\path\to\remote_fileIdentify