Metasploit mailing list archives

Re: Mssql module


From: HD Moore <hdm () metasploit com>
Date: Wed, 14 Oct 2009 17:25:12 -0500

On Tue, 2009-10-13 at 10:09 -0500, Jay wrote:
Hello all,

  I have been messing around with the mssql auxiliary modules and I
was wondering if its possible to enable windows authentication for
mssql. From looking at mssql_login in mssql.rb it appears that it is
going to take more than a simple hack.

The MSSQL backend was overhauled today, its now pretty usable as a
standard MSSQL client (it may be missing support for some column types
still). ReL1K's mssql_payload module was added as well, allowing
meterpreter to be loaded over MSSQL using standard auth and xp_cmdshell.
The fancy methods for re-enabling xp_cmdshell will be implemented in the
near future, and hopefully NTLM support once I can wrap my head around
it.

-HD

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


Current thread: