rapid7/metasploit-framework — pull request #4221 by nullbind (2014-11-17 19:12:43+00:00)
Title: added mssql_enum_windows_domain_accounts.rb

This module can be used to brute force RIDs associated with the domain of
the SQL Server using the SUSER_SNAME function. This is similar to the
smb_lookupsid module, but executed through SQL Server queries as any user
with the PUBLIC role (everyone). Information that can be enumerated includes
Windows domain users, groups, and computer accounts. Enumerated accounts can
then be used in online dictionary attacks.

**Lab Guide**
https://raw.githubusercontent.com/nullbind/Metasploit-Modules/master/mssql_enum_windows_domain_accounts_lab.txt

**Screenshot**
![a1](https://cloud.githubusercontent.com/assets/1179731/5075782/510f67ce-6e5b-11e4-8027-e669cdb1096b.png)