MS SQL in Active Directory
Let’s begin with some of the fundamentals.
First, we’ll discuss how to perform enumeration
against MS SQL in an Active Directory environment.
We’ll start with the assumption that we have
already compromised a workstation or server
and have access as an unprivileged domain user.
Second, we’ll discuss Microsoft SQL authentication.
We want to understand what kind of access an unprivileged domain user has
to a Kerberosintegrated MS SQL server.
Finally, we are going to combine this knowledge with traditional network attacks
and compromise the operating system of the SQL server.