In this post I cover how an attacker can take advantage of SQL Server 2025’s sp_invoke_external_rest_endpoint to exfiltrate data from a compromised instance. In my previous post I used sp_invoke_external_rest_endpoint …

In this post I’m querying Shodan‘s REST API directly from SQL Server using SQL Server 2025’s sp_invoke_external_rest_endpoint stored procedure. In my previous post I looked through Shodan for publicly exposed …

In this post I dig through some data that Shodan provides for internet-exposed SQL Server instances, their versions and locations. I occasionally check Shodan for SQL Server instances that are …

This month’s T-SQL Tuesday invitation comes from Brent Ozar, and it’s titled “When I’m looking at a query, I bet it’s bad if I see __.”. This is a fun …

This past weekend, I traveled to Zagreb for Data Saturday Croatia 2026. While this was my second time visiting the event, it was more significant for me since it was …

If you’ve been waiting to level up your SQL Server skills, the timing couldn’t be better. Registration is open at 50% off until July 10th, and my readers can get …

PSBlitz 6.1.0 is out and it brings new backup and security checks, improved Excel handling, support for the ImportExcel PowerShell module, as well as other improvements. What is PSBlitz? For …

In this post I cover SQL Server roles and permissions that can act as viable avenues for privilege escalation to sysadmin. A while ago, I wrote a blog post about …

This post is my guideline on how to handle and test SQL Server backups to ensure their viability and avoid a “Schrödinger’s backup” scenario. What’s Schrödinger’s backup? The term is …

In this blog post I demo cracking SQL Server 2025 login passwords offline with hashcat, including the current stable release (7.1.2) which doesn’t officially support MSSQL 2025. Note: If you’re …