Sqlninja
Exploit SQL injection on MS-SQL Server.
KaliParrothigh
pkg: sqlninja
Sqlninja specialises in escalating SQL injection against Microsoft SQL Server to OS command execution and shells.
Syntax
sqlninja -m {mode} -f {config}
Example
sqlninja -m test -f sqlninja.conf
Tests an injection point defined in the config file.
Advantages
- MS-SQL-focused exploitation
- OS-shell escalation
Disadvantages
- MS-SQL only
- Config-heavy/intrusive
Tags
#mssql#sqli#database
Official docs: Sqlninja ↗
Related commands
Frequently asked questions
What is Sqlninja used for?
Sqlninja specialises in escalating SQL injection against Microsoft SQL Server to OS command execution and shells.
What is an example Sqlninja command?
A common example is: sqlninja -m test -f sqlninja.conf — Tests an injection point defined in the config file.
Is Sqlninja part of Kali Linux?
Yes. Sqlninja ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install sqlninja.
What category of security tool is Sqlninja?
Sqlninja is a Database Assessment tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.