Awesome!
I hope you enjoyed the demos.
What we're learning here, it's just a fraction of the features of PowerUpSQL.
This framework can be used for a lot of things.
For example,
we can use PowerUpSQL for discovery in which you use the
tool to find Microsoft SQL Servers in the network, so
then we can attack them later.
Also,
we can use this tool to get initial access by scanning
for known vulnerabilities. Also, once we have initial access,
we can look for insecure configurations and weak credentials.
And more than that,
PowerUpSQL is really famous for its privilege escalation techniques.
And the interesting thing is that you can even try to get admin
privileges on the operating system using this tool.
And once you have access to the database,
you can use PowerUpSQL to create persistence by creating scheduled
tasks and triggered procedures. And believe it or not,
you can even use this tool for data exfiltration.
And as we can see,
PowerUpSQL has a lot of features. You can visit the official
wiki page to get more details on this feature.
And remember, if you don't want to type this link,
just go to the slides on the course material and you'll find a
link in there. Before we go, I want to leave you with some
actual resources about this tool.
First,
you can check the official documentation of the PowerUpSQL
by going to the wiki on the GitHub page.
In there, you'll find a detailed description of all the features of this tool.
Also, if you want to learn more about the tool,
I do recommend you watching the author talk on the tool.
This talk was presented at Black Hat 2018 and contains a lot of demos
showing the most important features of the tool.
Also, if you're interested in sensitive data collection,
there's one course here at Pluralsight in which we explore sensitive
data collection using a really interesting tool called PowerSploit.
And if you're wondering what it can do to prevent people from
exploiting your Microsoft SQL Servers,
there are a few recommendations. First, and the most
important one, audit your own company,
and this means try to use the PowerUpSQL against your
own company to see what you can find.
You may be surprised to know that someone can easily hack into your database.
Also, really important, do not reuse service accounts, and this will avoid
that attacker moving laterally in your government.
Also, as you may have noticed, using a strong password is really important.
Weak credentials can be easily cracked or guessed. And also really
important, ensure that all your database administrators are aware on how to
configure the Microsoft SQL Server in a secure way.
So, that's it. That's the end of our PowerUpSQL course.
I hope you enjoyed this course and that now you have one
more tool in your cybersecurity toolbox.
Thank you for watching, and I'll see you later.