mssqlclient.py
impacket MSSQL client: xp_cmdshell, impersonation and NTLM capture.
Impacket's MS SQL Server client. It authenticates with username/password, Windows auth or Kerberos, and from inside enables xp_cmdshell to run OS commands, impersonates logins (IMPERSONATE) or pivots to linked servers. A direct door from the DB to the system.
Family Databases
Flags -windows-auth -k xp_cmdshell
Concepts Command execution in MSSQL (xp_cmdshell), IMPERSONATE in MSSQL (EXECUTE AS LOGIN)
Cheatsheet MS SQL Server · 1433
Installation
# All of Impacket's *.py tools ship in the same package:
pipx install impacket
# invoke them as impacket-<tool> or <Tool>.py depending on the packagingUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.