MSSQL

PowerUpSQL

Import-Module .\PowerUpSQL.ps1
Get-SQLInstanceDomain ## Find Domain SQL Servers

Get-SQLInstanceDomain | Invoke-SQLAuditWeakLoginPw ## Find SQL Servers With Weak Credentials
Get-SQLInstanceDomain | Get-SQLConnectionTestThreaded -Username pastudent142 - Password 3X4Y## Try sql servers with a specific user and password
Get-SQLInstanceDomain |Get-SQLConnectionTest

Get-SQLFuzzServerLogin -Instance UFC-SQLDev.us.funcorp.local -Verbose

Impacket's GetUserSPNs.ps1

LOLBins

C:\Users\myhackingblog> setspn -T corp1 -Q MSSQLSvc/*