search

NetSPI / PowerUpSQL

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
Other
2.44k stars 460 forks source link

Running PowerUPSQL through SOCKS #79

Open qgrosperrin opened 11 months ago

qgrosperrin commented 11 months ago

Hi,

I'm having issues validating connections to SQL domain instances through a SOCKS proxy (Proxifier on Windows). Does the Test connection process actually needs UDP at all ? Any tips of getting to work through SOCKS ? Get-SQLInstanceDomain | Get-SQLConnectionTestThreaded

I can confirm manually that the SQL instance is indeed running for a particular host, TCP 1433 is accessible. It still says 'not accessible' or 'no named instance found' when running Get-SQLConnectionTest or Invoke-SQLAuditDefaultLoginPw I'm running PowerUpSQL without -Username -Password field, from runas /netonly session.

er4z0r commented 10 months ago

I have had similar issues. When you say you can confirm manually does that mean there is an MSSQL SPN on set for that host in Active Directory? I'm asking because AFAIK that is what Get-SQLInstance domain uses: SPNs.