Hi Brian.
How about:
python sqlmap.py -d "mssql://DOMAIN\user:pass@10.10.10.10:1433/REMOTE_DB"
or
python sqlmap.py -d "mssql://DOMAIN\\user:pass@10.10.10.10:1433/REMOTE_DB"
However, maybe something else could be wrong in your case. Please take a
look here [1]
Kind regards,
Miroslav Stampar
[
Try DOMAIN (four slashes)
Just a thought, this comes up in ruby sometimes as well:
file_local_write(@dest,"reg deleteval -k
HKLMSOFTWAREMicrosoftWindows\\
NTCurrentVersionWinlogonSpecialAccountsUserList -v
#{username}")
On Tue, Apr 16, 2013 at 8:52 PM, Brian Mill
What is the correct format to make a direct connection to a database
using windows domain credentials?
I have tried
./sqlmap.py -d "mssql://10.10.10.10:1433/REMOTE_DB" --dbms-cred
"DOMAIN\user:pass"
./sqlmap.py -d "mssql://10.10.10.10:1433/REMOTE_DB" --dbms-cred
"DOMAIN\\user:pass"
./sqlmap.py -
