SkillsAdd

wgpsec/aboutsecurity

mssql-pentesting

MSSQL 数据库服务（1433 端口）渗透测试方法论。涵盖 MSSQL 服务发现、默认凭据测试、数据库枚举、xp_cmdshell 命令执行、链接服务器利用、权限提升、NTLM 哈希窃取、已知漏洞利用。 当 Agent 扫描发现 1433 端口开放、需要测试 MSSQL 认证、通过 xp_cmdshell 执行命令、或利用链接服务器横向移动时，触发此 Skill。

First seen May 2, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity
View on skills.sh ↗ GitHub repository ↗
Feature your product here Skill page unit · reach builders installing agent skills View pricing →

Summary

  • MSSQL 数据库服务（1433 端口）渗透测试方法论。涵盖 MSSQL 服务发现、默认凭据测试、数据库枚举、xp_cmdshell 命令执行、链接服务器利用、权限提升、NTLM 哈希窃取、已知漏洞利用。
  • 当 Agent 扫描发现 1433 端口开放、需要测试 MSSQL 认证、通过 xp_cmdshell…

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

supabase-postgres-best-practices Shared topics
supabase/agent-skills

Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill …

1.4K installs
neon-postgres-branches Shared topics
neondatabase/agent-skills

>- Choose and create the right Neon branch type for testing and development. Use when users ask…

711 installs
pentesting-with-aws-security-agent Similar name
aws/agent-toolkit-for-aws

Run an AWS Security Agent penetration test against a live web application — registers and verif…

1.5K installs
managed-pentesting-with-strix Similar name
usestrix/strix

Run a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai pla…

216 installs
android-pentesting-tricks Similar name
yaklang/hack-skills

>- Android pentesting playbook. Use when testing Android applications for SSL pinning bypass, e…

20 installs
kubernetes-pentesting Similar name
yaklang/hack-skills

>- Kubernetes penetration testing playbook. Use when targeting Kubernetes clusters via API serv…

19 installs

Also in this package

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity
prompt-jailbreak 62 ctf-reverse 46 ad-domain-attack 45 nuclei-scan 45 efficiency-rules 45 report-generate 43 ctf-web-recon 43 ctf-crypto 43 ctf-pwn 41 passive-recon 41

Browse all from wgpsec/aboutsecurity

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.7K
Default branch master
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 15 installs