Skip to content

Utility Functions

Scott Sutherland edited this page Aug 7, 2016 · 14 revisions

These are essentially helper functions. Some of them are used by other PowerUpSQL functions, but all of them can be run independently.

Function Name Description
Get-SQLConnectionObject Creates a object for connecting to SQL Server.
Get-SQLFuzzObjectName Enumerates objects based on object id using OBJECT_NAME() and only the Public role.
Get-SQLFuzzDatabaseName Enumerates databases based on database id using DB_NAME() and only the Public role.
Get-SQLFuzzServerLogin Enumerates SQL Server Logins based on login id using SUSER_NAME() and only the Public role.
Get-SQLFuzzDomainAccount Enumerates domain groups, computer accounts, and user accounts based on domain RID using SUSER_SNAME() and only the Public role. Note: In a typical domain 10000 or more is recommended for the EndId.
Get-ComputerNameFromInstance Parses computer name from a provided instance.
Get-SQLServiceLocal Returns local SQL Server services.
Create-SQLFileXpDll Used to create CPP DLLs with exported functions that can be imported as extended stored procedures in SQL Server. Supports arbitrary command execution.
Get-DomainSpn Returns a list of SPNs for the target domain. Supports authentication from non domain systems.
Get-DomainObject Used to query domain controllers via LDAP. Supports alternative credentials from non-domain system.

Examples:

Get-SQLFuzzServerLogin -Verbose -Instance "SQLSVR1\Instance1"

Roadmap:

Get-SQLDatabaseOrphanUser             		
Get-SQLDatabaseUser- add fuzzing option		
Get-SQLDecryptedStoreProcedure            	
Get-SQLDownloadFile				
Get-SQLDownloadFileAdHocQuery			
Get-SQLDownloadFileAssembly             	
Get-SQLDownloadFileBulkInsert			
Get-SQLDownloadFileServerLine			
Get-SQLDownloadFileXpCmdshell			
Get-SQLInstalledSoftware			
Get-SQLServerLogin - add fuzzing option		
Get-SQLUploadFile				
Get-SQLUploadFileAdHocQuery             	
Get-SQLUploadFileAgent				
Get-SQLUploadFileAssembly             		
Get-SQLUploadFileServerLink             	
Get-SQLUploadFileXpCmdshell             	
Invoke-SqlOSCmdAdHoQueryMd			
Invoke-SqlOSCmdAgentActiveX            	
Invoke-SqlOSCmdAgentAnalysis			
Invoke-SqlOSCmdAgentCmdExe			
Invoke-SqlOSCmdAgentPs			
Invoke-SqlOSCmdAgentVbscript			
Invoke-SqlOSCmdAssembly             		
Invoke-SqlOSCmdServerLinkMd			
Invoke-SqlOSCmdSsisExecuteProcessTask
Create-SQLFileCLRDll
Create-SQLFileXpDll

Introduction

Cheat Sheets

PowerUpSQL Blogs

PowerUpSQL Talks

PowerUpSQL Videos

Function Categories

Related Projects

Recommended Content

Clone this wiki locally