NetSPI/PowerUpSQL

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

2737 stars · 471 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PowerUpSQL is a PowerShell toolkit for attacking and auditing SQL Server instances, supporting discovery, weak configuration auditing, privilege escalation, and post-exploitation like OS command execution. It is designed for penetration tests and red team engagements, but also helps administrators inventory SQL Servers and perform threat hunting.

Use cases

• discover SQL Server instances across an Active Directory domain
• audit SQL Server for weak configurations
• escalate privileges on SQL Server at scale
• execute OS commands through SQL Server during a pentest
• inventory all SQL Servers in a domain
• threat hunt for SQL Server attacks

When to choose

• you are running an internal penetration test or red team engagement against SQL Server
• you need to discover and inventory SQL Servers in an AD domain
• you want to audit SQL Server security configurations or hunt threats

When to avoid

• you need a general-purpose SQL client or database administration tool
• your target databases are not Microsoft SQL Server
• you are not working in a Windows/Active Directory environment

Facets

cli-tool · maturity active

security penetration-testing database developer-tools security penetration-testing databases windows windows cli sql-server red-team powershell-toolkit privilege-escalation threat-hunting active-directory

Member repositories

For agents

markdown · JSON · MCP: product_card(name="NetSPI/PowerUpSQL")