WEBVTT

00:00:04.510 --> 00:00:08.500
Hey there, welcome to Pluralsight. In this cybersecurity tools course,

00:00:08.650 --> 00:00:12.260
you'll learn how to collect sensitive information from Microsoft SQL

00:00:12.260 --> 00:00:17.380
Servers using the PowerUpSQL framework. In the red team engagement, after

00:00:17.380 --> 00:00:20.710
getting initial access to a few machines, it is really important to start

00:00:20.720 --> 00:00:24.020
collecting sensitive information so your client can understand the impact

00:00:24.020 --> 00:00:25.650
of a real cyber attack.

00:00:26.640 --> 00:00:29.690
The PowerUpSQL is a complete framework for exploiting

00:00:29.690 --> 00:00:33.060
Microsoft SQL Servers with tools that will help you from

00:00:33.060 --> 00:00:35.410
discovery to collection and exfiltration.

00:00:36.610 --> 00:00:39.480
In this course, you'll learn how to use PowerUpSQL to

00:00:39.480 --> 00:00:41.020
collect sensitive data in your environment.

00:00:41.730 --> 00:00:44.600
We start by learning how to discover weak credentials on

00:00:44.600 --> 00:00:46.500
the SQL database using PowerUpSQL.

00:00:48.040 --> 00:00:51.250
We then search and collect sensitive information from the database,

00:00:51.480 --> 00:00:54.010
including credit card data and stored passwords.

00:00:55.040 --> 00:00:57.730
After that, if you really want to simulate a real attacker,

00:00:57.910 --> 00:01:00.400
you'll learn how to cause impact on an environment by

00:01:00.400 --> 00:01:03.050
modifying stored data and even deleting tables.

00:01:03.840 --> 00:01:06.400
So, whether you're trying to collect sensitive information in the red

00:01:06.400 --> 00:01:09.370
team engagement or just looking to audit the security of your own

00:01:09.370 --> 00:01:12.580
company, join me in learning how to collect sensitive information using

00:01:12.580 --> 00:01:16.150
the PowerUpSQL tool, here at Pluralsight.