| PoC / Feature | MySQL/MariaDB | MSSQL Windows | MSSQL Linux |
|---|---|---|---|
SHOW DATABASES, VERSION() | ✅ | ❌ | ❌ |
LOAD_FILE / OUTFILE | ✅ | ❌ | ❌ |
| Ad Hoc Distributed Queries | ❌ | ✅ | ✅ |
| OPENROWSET(BULK) file read | ❌ | ✅ | ✅ |
| xp_cmdshell | ❌ | ✅ | ❌ |
| xp_dirtree NTLM capture | ❌ | ✅ | ❌ |
| Ole Automation Procedures | ❌ | ✅ | ❌ |
| CLR Integration | ❌ | ✅ | ✅ |
| Cross-DB Ownership Chaining | ❌ | ✅ | ✅ |
| External Scripts (R/Python) | ❌ | ✅ | ✅ |
| xp_regread (registry) | ❌ | ✅ | ❌ |
| Linked Servers | ❌ | ✅ | ✅ |
| SQL Agent Jobs (RCE) | ❌ | ✅ Std/Ent | ✅ Std/Ent |
| Credentials & Proxies | ❌ | ✅ Std/Ent | ✅ Std/Ent |
| xp_logininfo | ❌ | ✅ | ⚠️ partial |
| Database Mail | ❌ | ✅ Std/Ent | ✅ Std/Ent |
RED TEAM / SQL