---
id: 8135
title: "Attacking Application Specific SQL Server Instances"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/attacking-application-specific-sql-server-instances/"
published_at: "2018-05-08T00:00:00Z"
tags: ["windows", "penetration-testing", "database-security", "sql-server", "powerupsql", "default-passwords"]
phying_url: "https://phying.com/item/8135"
lang: en
---

# Attacking Application Specific SQL Server Instances

## Summary

Shows how to find SQL Server instances bundled with third-party applications and test them against a default credential list, using PowerUpSQL functions for discovery and automated login attempts.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2018-05-08T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/attacking-application-specific-sql-server-instances/
- **Phying News:** https://phying.com/item/8135