https://github.com/netspi/powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
https://github.com/netspi/powerupsql

Last synced: 30 days ago
JSON representation

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

• Host: GitHub
• URL: https://github.com/netspi/powerupsql
• Owner: NetSPI
• License: other
• Created: 2016-06-22T01:22:39.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2024-08-20T17:39:55.000Z (3 months ago)
• Last Synced: 2024-10-15T04:42:10.251Z (30 days ago)
• Language: PowerShell
• Homepage:
• Size: 20.7 MB
• Stars: 2,454
• Watchers: 107
• Forks: 462
• Open Issues: 22
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        

  

[![licence badge]][licence] 

[![wiki Badge]][wiki] 

[![stars badge]][stars] 

[![forks badge]][forks] 

[![issues badge]][issues] 

[licence badge]:https://img.shields.io/badge/license-New%20BSD-blue.svg

[stars badge]:https://img.shields.io/github/stars/NetSPI/PowerUpSQL.svg

[forks badge]:https://img.shields.io/github/forks/NetSPI/PowerUpSQL.svg

[issues badge]:https://img.shields.io/github/issues/NetSPI/PowerUpSQL.svg

[wiki badge]:https://img.shields.io/badge/PowerUpSQL-Wiki-green.svg

[licence]:https://github.com/NetSPI/PowerUpSQL/blob/master/LICENSE

[stars]:https://github.com/NetSPI/PowerUpSQL/stargazers

[forks]:https://github.com/NetSPI/PowerUpSQL/network

[issues]:https://github.com/NetSPI/PowerUpSQL/issues

[wiki]:https://github.com/NetSPI/PowerUpSQL/wiki

![PowerUpSQLLogo](https://raw.githubusercontent.com/NetSPI/PowerUpSQL/master/images/PowerUpSQL_GitHub4.png) 

PowerUpSQL includes functions that support SQL Server discovery, weak configuration auditing, privilege escalation on scale, and post exploitation actions such as OS command execution. It is intended to be used during internal penetration tests and red team engagements. However, PowerUpSQL also includes many functions that can be used by administrators to quickly inventory the SQL Servers in their ADS domain and perform common threat hunting tasks related to SQL Server.

### PowerUpSQL Wiki

For setup instructions, cheat Sheets, blogs, function overviews, and usage information check out the wiki: https://github.com/NetSPI/PowerUpSQL/wiki

### Author and Contributors

* Author: Scott Sutherland (@_nullbind) ![Twitter Follow](https://img.shields.io/twitter/follow/_nullbind.svg?style=social)

* Major Contributors: Antti Rantasaari, Eric Gruber (@egru), Thomas Elling (@thomaselling)

* Contributors: Alexander Leary (@0xbadjuju), @leoloobeek, Andrew Luke(@Sw4mpf0x), Mike Manzotti (@mmanzo_), @TVqQAAMA, @cobbr_io, @mariuszbit (mgeeky), @0xe7 (@exploitph), phackt(@phackt_ul), @vsamiamv, and @ktaranov

### Issue Reports

I perform QA on functions before we publish them, but it's hard to consider every scenario. So I just wanted to say thanks to those of you that have taken the time to give me a heads up on issues with PowerUpSQL so that we can make it better. 

* Bug Reporters: @ClementNotin, @runvirus, @CaledoniaProject, @christruncer, rvrsh3ll(@424f424f),@mubix (Rob Fuller)

### License

* BSD 3-Clause