RDSMCP

The tool connects to specified SQL Server instances, requiring network access. It uses `Trusted_Connection=yes` or explicit credentials. The connection string uses `Encrypt=yes;TrustServerCertificate=yes`, where `TrustServerCertificate=yes` bypasses certificate validation, potentially allowing MITM attacks if not used in a secure, trusted environment. The core SQL query utilizes `sp_MSforeachdb`, which can be a SQL injection risk if the inner queries were dynamically constructed from untrusted user input; however, in this implementation, the inner queries are fixed and use `?` only for database names derived internally from `sys.databases`, mitigating this specific risk. No hardcoded credentials or `eval` statements were found.