🧰 Microsoft SQL Server

The items that name it 8

• Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
  writeup2026-10-09It is written here as MSSQL.

  login scanner module, console output bug fixed

• From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669)
  writeup2026-09-30
• The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub
  writeup2026-09-29
• Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
  advisory2026-09-08
• Threat Actors Achieve Persistence After SQL Injection
  writeup2026-07-13It is written here as Microsoft SQL Server (MSSQL).

  sqlservr.exe instance exploited via SQL injection through an unvalidated web input field.

• Inside the RaaS Ecosystem: Operators, Affiliates & Attack Tradecraft | Huntress
  writeup2026-05-20It is written here as Microsoft SQL Server (MSSQL).

  Used to enable RDP

• How Hacked Construction Apps Are Bringing Down Jobsite Security
  writeup2026-01-21It is written here as Microsoft SQL Server (MSSQL).

  Backend database used by both FOUNDATION and Mjobtime applications; xp_cmdshell extended stored procedure enabled by attackers

• WriteAccountRestrictions (WAR) – What is it good for?
  writeup2025-10-01

  SCCM site database (CM_123) compromised via RBCD/S4U2Proxy impersonation of site server service account