---
id: 8371
title: "When Databases Attack: Hacking with the OSQL Utility"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/when-databases-attack-hacking-with-the-osql-utility/"
published_at: "2011-07-19T00:00:00Z"
tags: ["windows", "penetration-testing", "lateral-movement", "osql", "database-security", "sql-server"]
phying_url: "https://phying.com/item/8371"
lang: en
---

# When Databases Attack: Hacking with the OSQL Utility

## Summary

A NetSPI walkthrough shows how the OSQL utility, shipped with SQL Server since 2000, lets attackers enumerate SQL Servers over UDP broadcast and connect via trusted connections without credentials.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2011-07-19T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/when-databases-attack-hacking-with-the-osql-utility/
- **Phying News:** https://phying.com/item/8371