We have the ability to open interactive MSSQL sessions but only when authentication is provided. We should look into a SMB to MSSQL NTLM relay module to open MSSQL sessions with relayed authentication.

The module should be auxiliary/server/relay/smb_to_mssql.

Motivation

I'm opening this ticket by proxy as the functionality was requested in person at DEF CON.