---
id: 8183
title: "Finding Weak Passwords for Domain SQL Servers on Scale using PowerUpSQL"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/identifying-domain-sql-servers-configured-with-weak-passwords-on-scale-using-powerupsql/"
published_at: "2016-08-02T00:00:00Z"
tags: ["active-directory", "privilege-escalation", "auditing", "sql-server", "powerupsql", "weak-passwords"]
phying_url: "https://phying.com/item/8183"
lang: en
---

# Finding Weak Passwords for Domain SQL Servers on Scale using PowerUpSQL

## Summary

Shows how PowerUpSQL finds domain SQL Servers, enumerates SQL logins with a standard domain account, and audits them at scale for weak passwords that often enable privilege escalation.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2016-08-02T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/identifying-domain-sql-servers-configured-with-weak-passwords-on-scale-using-powerupsql/
- **Phying News:** https://phying.com/item/8183