HTB Academy: Attacking Common Services - Attacking SQL Databases

Sir can you help me or give me a hint how to get the hash for user in first question , because when i use what i study in that page is not work and all command ( EXECUTE) don’t work

hi,bro i cracked mssqlsvc hash,and get password,but also can’t login ,did you sloved this ?

error:
Impacket v0.10.1.dev1+20230316.112532.f0ac44bd - Copyright 2022 Fortra

Password:
[*] Encryption required, switching to TLS
[-] ERROR(WIN-02\SQLEXPRESS): Line 1: Login failed for user ‘MSSQLSVC’.

thanks really helped a lot

I am really stuck at Attacking common services in Attacing sql databases . I’m unable to login with the provided creds using windows auth. Logging without windows auth seems ok but with very minimal privileges… It seems to me unusable at all. But when I try to login using windows auth this is the error I got: ‘Login failed. The login is from an untrusted domain and cannot be used with Integrated authentication.’ Need help

■■■! Thank you so much. Without this hint I would never be able to solve this.

Use mssqlclient.py together with mssqlsvc creds and the command should contain authentication type.
HINT: python2 mssqlclient.py -p 1433 mssqlsvc@******** -windows-auth

You saved me, thank you !

tip:impacket-mssqlclient -windows-auth mssqlsvc@10.129.203.12