mssql-pentesting

该技能与其声明的 MSSQL 渗透测试目的基本一致，但其实际内容是面向 AI Agent 的完整攻击手册，包含命令执行、凭据窃取、横向移动、持久化和外带端点使用。不是已确认恶意植入型 malware，但属于高风险 offensive security skill，应归类为 SUSPICIOUS/高危。

This fragment is highly malicious and not representative of benign dependency/library code. It explicitly demonstrates SQL Server-to-OS command execution (via sp_execute_external_script and related mechanisms), sensitive file disclosure, outbound SMB/NTLM credential theft triggers, linked-server lateral movement, privilege escalation, and persistence/backdoor creation via startup-enabled procedures that invoke xp_cmdshell/powershell. The overall risk is extreme; treat as active intrusion guidance rather than a software component.

This artifact is an offensive MSSQL/AD exploitation runbook. It explicitly instructs actions that enable privilege escalation, OS command execution (xp_cmdshell and SQL Agent CmdExec), lateral movement (linked-server multi-hop and RPC OUT), and credential capture/relay (NTLM relay/UNC authentication triggers). While it is presented as documentation-like content rather than runnable package code, its intent and instructions are strongly malicious and highly unsafe to include or distribute within a software supply chain without a clearly justified defensive/authorized purpose.