HTB Querier Writeup — Explotación de MSSQL (2026)
SMB guest access → macro de Excel con creds de MSSQL → Responder hash steal via xp_dirtree → xp_cmdshell → reverse shell.
SMB guest access → macro de Excel con creds de MSSQL → Responder hash steal via xp_dirtree → xp_cmdshell → reverse shell.