quentinhardy/msdat

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1016 stars · 145 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

MSDAT is an open-source Python penetration testing tool for remotely testing the security of Microsoft SQL Server databases. It supports credential discovery, privilege escalation, OS command execution via xp_cmdshell/OLE automation, and schema/table dumping.

Use cases

• find valid mssql credentials remotely
• escalate privileges on sql server
• execute os commands through xp_cmdshell
• dump sql server schema and tables
• audit microsoft sql server security
• brute force sql server passwords
• get sql server configuration and user privileges

When to choose

• you are pentesting Microsoft SQL Server 2005-2019 remotely
• you need an all-in-one mssql attack toolkit in Python 3
• you want to test default/weak credentials or escalate a valid sql account

When to avoid

• you target non-Microsoft databases like MySQL or PostgreSQL
• you need a maintained tool with an active release cadence
• you require a licensed or formally supported product

Facets

cli-tool · maturity maintenance

penetration-testing security database vulnerability-scanning security penetration-testing databases python cli windows mssql pentest-tool privilege-escalation password-guessing xp-cmdshell database-attacking linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="quentinhardy/msdat")