Category: PowerShell

0

Webinar: Hacking SQL Servers on Scale using PowerShell

This presentation will provide an overview of common SQL Server discovery, privilege escalation, and data targeting techniques. It will also cover how SQL Servers can be leveraged to escalate privileges in Active Directory domains. Finally, we’ll show how PowerShell automation can be used to execute the SQL Server attacks on scale. This should be useful to penetration testers and system administrators trying to gain a better understanding of their SQL Server’s attack surface and how it can be exploited.

0

Searching SQL Servers & Saving Results, with Write-SqlTableData

The other day I was chatting with my friend Tom Roush ( B | T ) and he mentioned needing to scan every database on every SQL Server instance in his environment and look for a particular word in the stored procs. Tom and I had discussed basics of his environment once before so I knew he already had Registered Servers filled out with all the instances he was going to need to search.

Write-SqlTableData came out last month in SSMS 16.4, it’s V1 so it’s not perfect [yet] but boy is it ever magic when you’re in a hurry! In this case, in order to be able to save the results for Tom, we need to find what we’re looking for once and then create a table in SQL Server using those results. To do this we use our very much improved friend Invoke-Sqlcmd and we leverage the new -OutputAs DataTables parameter which came out earlier this year. That give us a .Net Data Table.

Automating Your SQL Server Best Practices Word Document 0

Automating Your SQL Server Best Practices Word Document

Just a quick update on PowerShell things for today but I hope to have some cool SQL Server 2016 features to share soon. Laerte Junior will be presenting a session for the PowerShell VC...

Performance Tweaking Your SQL Server via PowerShell and Other News 1

Performance Tweaking Your SQL Server via PowerShell and Other News

Wow, there’s so much PowerShell news and goings-on that I barely have time to update the blog.  Here is a very terse update of some of what’s going on. Thank you to all of...

Next Fix for SQLPS module – Invoke-Sqlcmd – Object Output 0

Next Fix for SQLPS module – Invoke-Sqlcmd – Object Output

The compelling thing about PowerShell is that you’re working with objects instead of just text. For SQL folks you’re already aware of the benefits of working with objects is better because you know it’s...

%d bloggers like this: