The Complete Metasploit Guide

Scanning MSSQL with Metasploit modules

Let's jump into Metasploit-specific modules for testing the MSSQL server and see what kind of information we can gain by using them. The very first auxiliary module we will be using is mssql_ping. This module will gather additional service information.

So, let's load the module and start the scanning process as follows:

We can see from the previous results that we got a good amount of information from the scan. Nmap offers a similar module to scan MSSQL database. However, Metasploit auxiliaries have a competitive edge of readability over the output from Nmap. Let's see what other modules can be used to ...