Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

mssql_login documentation added. #18428

Merged
merged 5 commits into from
Oct 13, 2023
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
43 changes: 43 additions & 0 deletions documentation/modules/auxiliary/scanner/mssql/mssql_login.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
## Vulnerable Application

This module simply queries the MSSQL instance for a specific user/pass (default is sa with blank).
jheysel-r7 marked this conversation as resolved.
Show resolved Hide resolved

jheysel-r7 marked this conversation as resolved.
Show resolved Hide resolved
## Verification Steps
Example steps in this format (is also in the PR):

jheysel-r7 marked this conversation as resolved.
Show resolved Hide resolved
1. Start msfconsole
2. Do: ```use scanner/mssql/mssql_login```
3. Do: ```set RHOSTS [IP]```
4. Do: ```run```
jheysel-r7 marked this conversation as resolved.
Show resolved Hide resolved
5. You should get a shell.

## Options
A number of options interesting options without default values exist. They are as follows:
jheysel-r7 marked this conversation as resolved.
Show resolved Hide resolved

jheysel-r7 marked this conversation as resolved.
Show resolved Hide resolved
Name Current Setting Required Description
---- --------------- -------- -----------
PASSWORD no A specific password to authenticate with
PASS_FILE no File containing passwords, one per line
RHOSTS yes The target host(s),
USERPASS_FILE no File containing users and passwords separated by space, one pair per line
USER_FILE no File containing usernames, one per line

Options ending in _FILE are used by specifing a file location. For example, specifying the USER_FILE would happend as follows:

```
msf6 auxiliary(scanner/mssql/mssql_login) > set USER_FILE ./userfile
```


## Scenarios
Specific demo of using the module that might be useful in a real world scenario.
jheysel-r7 marked this conversation as resolved.
Show resolved Hide resolved
```
msf > use scanner/mssql/mssql_login
msf (auxiliary(scanner/mssql/mssql_login)) > set RHOSTS 178.33.113.209
msf (auxiliary(scanner/mssql/mssql_login)) > run

[*] 59.36.92.188:1433 - 59.36.92.189:1433 - MSSQL - Starting authentication scanner.
[-] 59.36.92.188:1433 - 59.36.92.189:1433 - LOGIN FAILED: WORKSTATION\sa: (Unable to Connect: The connection with (59.36.92.188:1433) timed out.)
[*] 59.36.92.188:1433 - Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
jheysel-r7 marked this conversation as resolved.
Show resolved Hide resolved
```