Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

When Databases Attack: SQL Server Express Privilege Inheritance Issue

netspi.com | blog | #privilege-escalation | #windows | #penetration-testing | #misconfiguration | #database-security | #sql-server-express

Summary

By default, SQL Server Express grants connect rights to BUILTIN\Users, letting any authenticated domain user reach instances with TCP listeners enabled. The author details the attack path and fixes.
Published
Collected

original ↗

Related coverage

blog · netspi.com
SQL Server – Link….. Link….. Link….. and Shell: How to Hack Database Links in SQL Server!
Misconfigured SQL Server linked servers let attackers traverse database link networks, access unauthorized data, and deploy shells. The post covers enumerating links via the sysservers table.
blog · netspi.com
When Databases Attack – Finding Data on SQL Servers
Scott Sutherland shares scripts for finding sensitive data in SQL Server: a TSQL script sampling keyword-matching columns across databases, plus a Metasploit auxiliary module wrapping it.
blog · netspi.com
When Databases Attack: Hacking with the OSQL Utility
This blog will provide some examples that illustrate how the OSQL utility can be used to gain unauthorized access to systems, databases, and sensitive information.
blog · netspi.com
Internal Penetration Testing: Attacking Systems That Matter
When you are conducting internal penetration tests in large environments, prioritizing attacks can be a challenging task, because of the number of systems and vulnerabilities.
blog · projectblack.io
Bypassing EDR with Local AI
A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.
blog · projectzero.google
Windows Exploitation Tricks: Exploiting Arbitrary File Writes for Local Elevation of Privilege
A Project Zero post explains how arbitrary file write bugs on Windows can be turned into local privilege escalation, walking through practical exploitation techniques for this bug class.
back