MSSQL

---

mssqlclient

impacket-mssqlclient -target-ip <target> -dc-ip <dc> offsec.local/cub3:[e-mail] -windows-auth

Queries

select database_id, name, create_date from sys.databases;

enum_owner

enum_logins

enum_impersonate

exec_as_login <login_user>