Advanced MSSQL Security Training

The Power Behind Industry Leaders

About Training

The Advanced MSSQL Security Training is a corporate-level course designed to teach participants hands-on advanced exploitation techniques targeting MSSQL databases.

Throughout the training, which combines theoretical instruction with practical exercises, attendees will gain in-depth knowledge on advanced MSSQL exploitation methods, techniques for bypassing security controls, and strategies for advancing within compromised systems. The course aims to enhance both technical expertise and practical defense capabilities against cyberattacks.

Conducted online in a fully hands-on format, the training is scheduled on weekdays and completed within 3 days. Upon successful completion, participants receive a wet-signed Privia Security Certificate of Participation

Training Content

1. Day

Basic Database Security

MS-SQL Server 2016 Sample Lab Deployment
MS-SQL Server 2016 Security and Roles
MS-SQL Security Model
Server-Level Security
Basic Database Security
User Accounts
Privilege and Permission Management
Creating Custom Database Roles
Authorization and Access Control
MS-SQL Information Gathering Techniques

2. Day

MSSQL Attack Techniques

Port Scanning Techniques
- Nmap
- Metasploit
- Paping
- SQL Server Management Studio
MS-SQL Exploitation Techniques
- Brute Force
- Nmap
- Metasploit
- WarSQLi
- Developing a Custom Brute-Force Tool
Man-in-the-Middle (MITM)
- Basic Networking Concepts Related to MITM
- ARP
- Forwarding
- NAT
Extracting MS-SQL Passwords from Memory

Post-Exploitation in MS-SQL
- Potentially Malicious Stored Procedures
- Malicious Use of sp_oacreate and sp_oamethod
- Malicious Use of xp_cmdshell

3. Day

Advanced Techniques

- MS-SQL CLR Integration
- Custom CLR Development Samples
- Attack-Oriented CLR Module Development
- CLR-PowerShell Custom Code Execution
- Bypassing Security Products via CLR
- Creating and Executing In-Memory Malware
Meterpreter Sessions
- Establishing a Meterpreter Session
- Privilege Escalation from Meterpreter
- Custom Privilege Escalation Techniques
MS-SQL Relaying Techniques
- Understanding Relaying Attacks
- Network Scanning and Mapping
- Remote Code Execution on Other Systems
Lateral Movement & Post-Exploitation
- WinRM (Windows Remote Management)
- Pass-the-Hash
- Over Pass-the-Hash
- Golden Ticket Attacks
- WMI (Windows Management Instrumentation)
- Port Forwarding Techniques
- Establishing Meterpreter Sessions on Other Systems