---
id: 8308
title: "Executing SMB Relay Attacks via SQL Server using Metasploit"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/executing-smb-relay-attacks-via-sql-server-using-metasploit/"
published_at: "2012-12-26T00:00:00Z"
tags: ["ntlm", "metasploit", "pentest", "mitm", "sql-server", "smb-relay"]
phying_url: "https://phying.com/item/8308"
lang: en
---

# Executing SMB Relay Attacks via SQL Server using Metasploit

## Summary

Explains triggering SMB relay attacks through SQL Server functions like xp_dirtree, then using new Metasploit modules to capture, crack, or relay hashes; SMB signing is the main defense.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2012-12-26T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/executing-smb-relay-attacks-via-sql-server-using-metasploit/
- **Phying News:** https://phying.com/item/8308