> For the complete documentation index, see [llms.txt](https://www.netexec.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.netexec.wiki/mssql-protocol.md).

# MSSQL protocol

- [Enumeration](https://www.netexec.wiki/mssql-protocol/enumeration.md)
- [Enumerating encryption settings](https://www.netexec.wiki/mssql-protocol/enumeration/enumerating-encryption-settings.md)
- [Enumerating Channel Binding configuration](https://www.netexec.wiki/mssql-protocol/enumeration/enumerating-channel-binding-configuration.md)
- [Password Spraying](https://www.netexec.wiki/mssql-protocol/mssql-passwordspray.md)
- [Authentication](https://www.netexec.wiki/mssql-protocol/authentication.md)
- [MSSQL PrivEsc](https://www.netexec.wiki/mssql-protocol/mssql-privesc.md): Module to privesc from standard user to DBA
- [MSSQL Command Execution](https://www.netexec.wiki/mssql-protocol/mssql-command.md): Execute MSSQL command using NetExec
- [MSSQL Upload & Download](https://www.netexec.wiki/mssql-protocol/mssql-upload-download.md)
- [Execute via xp\_cmdshell](https://www.netexec.wiki/mssql-protocol/windows-command.md): Execute Windows command using NetExec
- [Enumerate Users by Bruteforcing RID](https://www.netexec.wiki/mssql-protocol/enumerate-users-by-bruteforcing-rid.md)
- [MSSQL Linked Servers](https://www.netexec.wiki/mssql-protocol/mssql-linked-servers.md): Discover and execute MSSQL queries and system commands on linked MSSQL servers using NetExec