Operator On The Wire
Join
← Back to Knowledge Base
RED TEAM / SQL

SQL Matrix

PoC / FeatureMySQL/MariaDBMSSQL WindowsMSSQL Linux
SHOW DATABASES, VERSION()
LOAD_FILE / OUTFILE
Ad Hoc Distributed Queries
OPENROWSET(BULK) file read
xp_cmdshell
xp_dirtree NTLM capture
Ole Automation Procedures
CLR Integration
Cross-DB Ownership Chaining
External Scripts (R/Python)
xp_regread (registry)
Linked Servers
SQL Agent Jobs (RCE)✅ Std/Ent✅ Std/Ent
Credentials & Proxies✅ Std/Ent✅ Std/Ent
xp_logininfo⚠️ partial
Database Mail✅ Std/Ent✅ Std/Ent