Building a Vulnerable MSSQL Server for a Red Team Lab
· 1:11:57 · Watch on YouTube ↗
Summary
A red team lab tutorial builds an intentionally vulnerable MSSQL server, discusses credential reuse and service-account privileges, and troubleshoots a PowerShell setup script and database connectivity.
Key points
- The presenter describes linked SQL servers, weak credentials and database command execution as attack scenarios for the lab.
- The tutorial explains how reused local administrator credentials can enable access across systems and how LAPS can reduce that risk.
- The proposed configuration gives a SQL service account privileges intended to support local privilege-escalation exercises.
- A PowerShell script installs and deliberately misconfigures the server, including weak passwords and enabled command-execution features.
- The presenter fixes script errors and a SQL instance network configuration issue before connecting to the database from a client.
- The presenter recommends understanding and reviewing AI-generated code rather than relying on it without knowing how it works.
Article Details
- Topics
- [00:00] MSSQL attack scenarios and linked servers
- [02:15] Credential reuse and local administrator passwords
- [04:06] Service-account privileges and local privilege escalation
- [05:15] LAPS and local credential reuse
- [08:15] SQL command execution and authentication capture scenarios
- [10:23] Building and domain-joining the lab server
- [34:46] Reviewing the vulnerable server setup script
- [48:34] Troubleshooting script failures and database connectivity
- [01:07:21] Connecting to the configured database