mssqlclient.py Command Examples
Connect to Microsoft SQL Server instances and execute queries. Part of the Impacket suite. More information: https://github.com/fortra/impacket.
- Connect to an MSSQL server using Windows authentication:
mssqlclient.py -windows-auth {{domain}}/{{username}}:{{password}}@{{target}}
- Connect using SQL server authentication:
mssqlclient.py {{username}}:{{password}}@{{target}}
- Connect using pass-the-hash authentication:
mssqlclient.py {{domain}}/{{username}}@{{target}} -hashes {{LM_Hash}}:{{NT_Hash}}
- Connect using Kerberos authentication (requires valid tickets):
mssqlclient.py -k {{domain}}/{{username}}@{{target}}
- Execute a specific SQL command upon connection:
mssqlclient.py {{username}}:{{password}}@{{target}} -query "{{SELECT user_name();}}"
- Execute multiple SQL commands from a file:
mssqlclient.py {{username}}:{{password}}@{{target}} -file {{path/to/sql_file.sql}}
- Connect to a specific database instance (default is
None
):
mssqlclient.py {{username}}:{{password}}@{{target}} -db {{database_name}}
- Display SQL queries before execution:
mssqlclient.py {{username}}:{{password}}@{{target}} -show