In this tutorial, we will step through installing PostgreSQL, connecting to the database, loading some data, and running a variety of SQL queries.

I ended up with a combination of Server Studio and WinSQL Lite to accomplish what I though I needed to execute from the command line.<BR><BR>Of course what I accomplished was very, very bad news ...

If the compromised application has elevated permissions, the attackers may activate the 'xp_cmdshell' command to run operating system (OS) commands via SQL, giving them a shell in the host.