LOLBAS/OtherMSBinaries/Sqltoolsps.md

SQLToolsPS.exe

• Functions: Execute, evade logging

SQLToolsPS.exe -noprofile

Acknowledgements:

• Pierre-Alexandre Braeken - @pabraeken

Code sample:

• Downloading & executing a file

C:\Users>"C:\Program Files (x86)\Microsoft SQL Server\130\Tools\Binn\SQLToolsPS.exe -noprofile -command Start-Process calc"

Resources:

• https://twitter.com/pabraeken/status/993298228840992768

Full path:

C:\Program files (x86)\Microsoft SQL Server\130\Tools\Binn\sqlps.exe

Notes: A Powershell host.