PSBlitz 6.1.0 is out and it brings new backup and security checks, improved Excel handling, support for the ImportExcel PowerShell module, as well as other improvements. What is PSBlitz? For …

In this post I cover SQL Server roles and permissions that can act as viable avenues for privilege escalation to sysadmin. A while ago, I wrote a blog post about …

This post is my guideline on how to handle and test SQL Server backups to ensure their viability and avoid a “Schrödinger’s backup” scenario. What’s Schrödinger’s backup? The term is …

In this blog post I demo cracking SQL Server 2025 login passwords offline with hashcat, including the current stable release (7.1.2) which doesn’t officially support MSSQL 2025. Note: If you’re …

In this post I’ll go over three points that are vital in preventing SQL injection when working with dynamic T-SQL. What is SQL injection SQL injection (aka SQLi) is a …

This is my second time participating in T-SQL Tuesday, and Steve Hughes‘s invitation about an impactful session from a conference brought back some memories from 11 years ago. My experience …

In this post I provide some examples as to why FLOAT isn’t the best option for storing exact financial data in SQL Server. During the last couple of years I’ve …

It took me a while, considering the previous release was back in December, but the latest release of PSBlitz (6.0.0) is finally out and it brings GUI Mode, Dark Mode, …

The latest update to SSMS 22 adds 4 new results export formats: Excel, JSON, Markdown, and XML.In this post I cover where to find the new export formats and one …

In this post I cover the steps required to change (downgrade or upgrade) the edition of a SQL Server instance running on Linux. In my previous post I’ve went through …