Security - Jon Gurgul's Blog

Regain access to SQL Server via inject service

One way to regain access to SQL Server is to use a simple inject technique which overrides the current Image Path for the SQL Writer service. PsExec can alternatively…

Jon Gurgul 2017-08-12

SQL Server

Checking what permissions they have in SQL Server

The function sys.fn_my_permissions is very useful for seeing what permissions you have, but it can be just as useful to check someone else. For this all that is needed is to use EXECUTE…

Jon Gurgul 2014-05-29

SQL Server

Dangers of giving dbo in MSDB

I wanted to talk today about something that I have often seen in environments which is that dbo is granted to msdb without a second thought to the exact implications. So…

Jon Gurgul 2014-04-22

SQL Server

SQL Server Login password hash

In this article we will look at how SQL Server stores passwords and how we can go about working them out. As a developer/administrator you are probably accessing SQL Server…

Jon Gurgul 2014-01-30

SQL Server

Running as local system to allow administrators in to SQL Server

In cases when there are no provisioned accounts in a SQL Server instance which are known or working, then there is an option instead to run as nt authority \…

Jon Gurgul 2013-12-15

SQL Server

SQL Server Instance Security: Scripting Permissions Part 2

After writing a powershell way of scripting permissions I thought I better just show the way I used to do it using T-SQL. Although this script is not complete and…

Jon Gurgul 2012-03-22

Powershell

SQL Server Instance Security: Scripting Permissions

Another How-To post and this time focusing on scripting permissions. Here is how to script User(s), Object(s), Role(s), Server Role(s) and Server Object(s) Permissions. Beginning with the simple way via…

Jon Gurgul 2012-03-22