MSSQL abuse

xp_cmdshell, impersonation, linked servers or hash theft with xp_dirtree. Used in 17 machines, sorted from easiest to hardest. The ▶ link takes you to the minute of the video where it is used.

Often goes with

Combine this technique with others in the search →