## https://sploitus.com/exploit?id=149A9C4A-F0DC-5179-9E07-25E40515E34F
This is an offensive tool for Microsoft SQL Server (MSSQL) database exploitation.
The tool is called "MSDAT" and is designed to perform various attacks on MSSQL databases, including reading and writing files, executing system commands, and more.
The tool uses a variety of techniques, including OLE automation, SQL injection, and other methods to exploit vulnerabilities in MSSQL databases.
The tool is written in Python and uses the pymssql library to interact with MSSQL databases.
The tool has several modules, including:
BulkOpen: allows reading a file stored in the database server using BULK INSERT
Cleaner: cleans traces and logs generated by the tool
Jobs: executes system commands on the target using SQL Server Agent Stored Procedures (Jobs)
Mssql: provides a class for interacting with MSSQL databases
MssqlInfo: provides information about a remote MSSQL database without authentication
OleAutomation: uses OLE automation in Transact-SQL to read/write file and execute system commands
Output: handles all output except log
The tool has several features, including:
Reading and writing files
Executing system commands
Using OLE automation
Using SQL injection
Using other methods to exploit vulnerabilities
The tool is designed