In Microsoft SQL Server, logins and users are both types of security principals, but they operate at different levels:

• Logins exist at the server level and are used to authenticate users who want to connect to the SQL Server instance.
• Users exist at the database level and are used to control access within a specific database.

A single login can be associated with multiple users across different databases, but within each database, it can only be mapped to one user. This means that a login can have access to multiple databases but must have a corresponding user entry in each database to interact with it.

📡 Accessing MSSQL Server

🔐 MSSQL Authentication Mechanisms

🧾 Basic Enumeration Queries

📈 Basic Privilege Escalation Queries

🧨 Command Execution

🔗 Lateral Movement using Linked Servers in MSSQL

🧰 Tools of the Trade

🛡️ Defensive Considerations

MSSQL cheat Sheet

AD MSSQL check

UNC