Curated security research, vulnerabilities, advisories and tools for practitioners.

Updates to the MSSQLHound OpenGraph Collector for BloodHound

Summary

MSSQLHound, a PowerShell script that collects security information from remote MSSQL Server instances, now scans remote MSSQL Server instances to determine whether or not NTLM relay attacks are possible, accounts for a recent privilege escalation vulnerability, and includes queries you can import into the BloodHound attack path graph to visualize, navigate, and remediate misconfigurations in MSSQL.
Published
Collected