snippetbashTip

mssqlclient.py — Connect to Microsoft SQL Server instances and execute queries. Part of the Impacket suite. More info

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

servercommandinstancesmicrosoftcliconnectsqlmssqlclient.py

Problem

How to use the mssqlclient.py command: Connect to Microsoft SQL Server instances and execute queries. Part of the Impacket suite. More information: <https://github.com/fortra/impacket>.

Solution

mssqlclient.py — Connect to Microsoft SQL Server instances and execute queries. Part of the Impacket suite. More information: <https://github.com/fortra/impacket>.

Connect to an MSSQL server using Windows authentication:

mssqlclient.py -windows-auth {{domain}}/{{username}}:{{password}}@{{target}}

Connect using SQL server authentication:

mssqlclient.py {{username}}:{{password}}@{{target}}

Connect using pass-the-hash authentication:

mssqlclient.py {{domain}}/{{username}}@{{target}} -hashes {{LM_Hash}}:{{NT_Hash}}

Connect using Kerberos authentication (requires valid tickets):

mssqlclient.py -k {{domain}}/{{username}}@{{target}}

Execute a specific SQL command upon connection:

mssqlclient.py {{username}}:{{password}}@{{target}} -query "{{SELECT user_name();}}"

Execute multiple SQL commands from a file:

mssqlclient.py {{username}}:{{password}}@{{target}} -file {{path/to/sql_file.sql}}

Connect to a specific database instance (default is None):

mssqlclient.py {{username}}:{{password}}@{{target}} -db {{database_name}}

Display SQL queries before execution:

mssqlclient.py {{username}}:{{password}}@{{target}} -show

Code Snippets

Connect to an MSSQL server using Windows authentication

mssqlclient.py -windows-auth {{domain}}/{{username}}:{{password}}@{{target}}

Connect using SQL server authentication

mssqlclient.py {{username}}:{{password}}@{{target}}

Connect using pass-the-hash authentication

mssqlclient.py {{domain}}/{{username}}@{{target}} -hashes {{LM_Hash}}:{{NT_Hash}}

Connect using Kerberos authentication (requires valid tickets)

mssqlclient.py -k {{domain}}/{{username}}@{{target}}

Execute a specific SQL command upon connection

mssqlclient.py {{username}}:{{password}}@{{target}} -query "{{SELECT user_name();}}"

Context

tldr-pages: common/mssqlclient.py

Revisions (0)

No revisions yet.