After finding valid user credentials for MSSQL, an attempt was made to login to the SMB server, resulting in a compromise. However, when attempting to use WinRM, it was discovered that it was filtered.

• Use mssqlproxy toolkit to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse.
• Download the required DLL file from the given link and rename it.
• Use mssqlclient to install Microsoft.SqlServer.Proxy DLL and check the Proxy DLL.
• Enable the Proxy.
• Modify the proxychains4 config file and use proxychains to scan the Wsman port.

                                                               wsmans port is filtered. 

crackmapexec smb 10.10.10.240 -u svc_mssql -p '#mssql_s3rV1c3!2020'

                                                              Valid user credentials for MSSQL,

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server.

Please read this article carefully before continuing.

Clone the GitHub repository that supports Python 3.