---
id: 8353
title: "When Databases Attack – Finding Data on SQL Servers"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/when-databases-attack-finding-data-on-sql-servers/"
published_at: "2011-11-14T00:00:00Z"
tags: ["penetration-testing", "metasploit", "sensitive-data", "database-security", "sql-server", "tsql"]
phying_url: "https://phying.com/item/8353"
lang: en
---

# When Databases Attack – Finding Data on SQL Servers

## Summary

Scott Sutherland shares scripts for finding sensitive data in SQL Server: a TSQL script sampling keyword-matching columns across databases, plus a Metasploit auxiliary module wrapping it.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2011-11-14T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/when-databases-attack-finding-data-on-sql-servers/
- **Phying News:** https://phying.com/item/8353