hex_to_sid — MSSQL SID Converter

Use case: Get domain SID from inside MSSQL when you can’t run lookupsid from Kali.

MSSQL query

SELECT SUSER_SID('SIGNED\Administrator');
-- b'0105000000000005150000005b7bb0f398aa2245ad4a1ca4f4010000'

Script: hex_to_sid.py (same folder)

python3 hex_to_sid.py 0105000000000005150000005b7bb0f398aa2245ad4a1ca4f4010000
# S-1-5-21-4088429403-1159899800-2753317549-500

Domain SID for ticketer: drop the last RID (-500 for Administrator):

S-1-5-21-4088429403-1159899800-2753317549