HTB Querier Writeup — Exploração MSSQL (2026)
Acesso guest no SMB -> macro Excel com creds MSSQL -> roubo de hash via Responder com xp_dirtree -> xp_cmdshell -> reverse shell.
Acesso guest no SMB -> macro Excel com creds MSSQL -> roubo de hash via Responder com xp_dirtree -> xp_cmdshell -> reverse shell.