#hoaxshell — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #hoaxshell, aggregated by home.social.
-
In this post I'm covering the risks brought on by not securing SQL Server's service account and setting it to run under a privileged account, and demo how an attacker can leverage it to gain access to the instance's host.
It was fun using Burp Suite Pro to demo data exfiltration through HTTP, as well as HoaxShell to demo initiating a reverse shell connection, all from SQL Server.https://vladdba.com/2023/07/24/securing-sql-servers-service-account/
#sqlserver #dba #mssqlserver #mssql #sqlserverdba #windows #security #hoaxshell #burpsuite