Easy fix for SQL Server
2022-02-08
If you are a regular user of the SQL server then you are probably familiar with corrupted databases. This is usually due to poorly working data conversion modules and variousRead More →
Azure confidential computing: Microsoft boosts security for cloud data
2017-09-18
Microsoft is rolling out new secure enclave technology for protecting data in use. Microsoft has opened an early access program for a new range of Azure security features it callsRead More →
Using SQL Server for attacking a Forest Trust
2017-03-24
Recently I started playing with the awesome PowerUpSQL tool by guys at NetSPI. I was interested in the ability to attack an Active Directory (AD) environment using access to aRead More →
2 thoughts on “Code Execution in SQL Server via Fileless CLR-based Custom Stored Procedures”
2017-02-11
Recently I was given the task of performing command execution on a compromised MSSQL server with the following restrictions: No use of the xp_cmdshell stored procedure. No writing anything toRead More →
