Dew Drop Weekly Newsletter 479 - Week Ending April 17, 2026

Dew Drop Weekly Newsletter 479 - Week Ending April 17, 2026

Zoho Campaigns

New blog post:
I demo cracking SQL Server 2025 login passwords offline.
hashcat is currently the only viable tool for auditing SQL Server 2025 login passwords.

The results show how #PBKDF2 slows down brute-force attacks both inside and outside of SQL Server compared to the pre-2025 hashing algorithm.

Full methodology, benchmarks, and code included.
https://vladdba.com/2026/04/16/cracking-sql-server-2025-login-passwords-offline-with-hashcat/
#sqlserver #sqldba #microsoftsqlserver #hashcat #cybersecurity #infosec #sql

Cracking SQL Server 2025 login passwords offline with hashcat

In this blog post I demo cracking SQL Server 2025 login passwords offline with hashcat, including the current stable release (7.1.2).

VladDBA
Dew Drop โ€“ April 16, 2026 (#4648) โ€“ Morning Dew by Alvin Ashcraft

How to Install #Microsoft SQL Server on #Ubuntu #VPS (10 Minute Quick-Start Guide)

This article provides a guide for how to install Microsoft SQL Server on Ubuntu VPS.
What is Microsoft SQL Server?
Microsoft SQL Server is a relational database management system (RDBMS) developed by Microsoft. It is used to store, retrieve, manage, and analyze data in a structured way using SQL (Structured ...
Continued ๐Ÿ‘‰ https://blog.radwebhosting.com/install-microsoft-sql-server-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #apache #sqlserver #mssql #selfhosting #selfhosted #freetds

How to Install #Microsoft SQL Server on #Ubuntu #VPS (10 Minute Quick-Start Guide)

This article provides a guide for how to install Microsoft SQL Server on Ubuntu VPS.
What is Microsoft SQL Server?
Microsoft SQL Server is a relational database management system (RDBMS) developed by Microsoft. It is used to store, retrieve, manage, and analyze data in a structured way using SQL (Structured ...
Continued ๐Ÿ‘‰ https://blog.radwebhosting.com/install-microsoft-sql-server-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #selfhosted #sqlserver #freetds #selfhosting #mssql #apache

New blog post:
In which I go over three points that are vital in preventing SQL injection when working with dynamic T-SQL.
https://vladdba.com/2026/04/15/dynamic-t-sql-sql-injection-quotename-executesql/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql
Using dynamic T-SQL? Parametrization alone can't prevent SQL injection

In this post I'll go over three points that are vital in preventing SQL injection when working with dynamic T-SQL.

VladDBA
SSMS 22.5 Release

SSMS 22.5 is now available and includes improvements for SQL projects, the Migration component, the connection dialog, and support for interactions with the...

TECHCOMMUNITY.MICROSOFT.COM
Dew Drop โ€“ April 15, 2026 (#4647) โ€“ Morning Dew by Alvin Ashcraft

My Spring gift to the #SQLServer and #InfoSec communities: support for cracking SQL Server 2025's PBKDF2 hashing algorithm with hashcat.
Blog post coming this week.

https://github.com/hashcat/hashcat/pull/4667

#Hashcat #DBA #CyberSecurity #MSSQL #SQL #SQLServer

Add module 1732: MSSQL (2025) by VladDBA ยท Pull Request #4667 ยท hashcat/hashcat

Add hash mode for Microsoft SQL Server 2025 (MSSQL 2025) sql login hashes Module 1732 adds support for cracking SQL Server 2025's new sql login password hashes SQL Server 2025 introduces a new ...

GitHub
New blog post:
My second contribution to T-SQL Tuesday, about a session that got me interested into the security side of things.
https://vladdba.com/2026/04/14/t-sql-tuesday-197-impactful-session-dba-career/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday
T-SQL Tuesday #197 - An impactful session changed my DBA career

My second time participating in T-SQL Tuesday, Steve Hughesโ€˜s invitation about an impactful session from a conference brought back memories.

VladDBA