Security Incidents mailing list archives

Re: TCP:80, TCP:1433 squelda 1.0 probe


From: Joe Stewart <jstewart () lurhq com>
Date: Mon, 2 Dec 2002 08:53:24 -0500

On Friday 29 November 2002 12:35 am, John Sage wrote:
Seen this exact tool once before, back in August, reference:

http://cert.uni-stuttgart.de/archive/intrusions/2002/08/msg00200.html

The brute-force MSSQL attacks in this probe with the "squelda" reference
were generated by sqldict: http://ntsecurity.nu/toolbox/sqldict/

-Joe

-- 
   Joe Stewart  <jstewart () lurhq com>
  Senior Information Security Analyst 
-----------------------------------------
 "24x7 Enterprise Security Monitoring"
LURHQ Corporation  http://www.lurhq.com/


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: