Penetration Testing mailing list archives
PERL based MS-SQL username/password checker
From: RT <roelof () sensepost com>
Date: Fri, 9 Nov 2001 01:37:18 +0000 (GMT)
Ppl, Always wanted a PERL based script that could test for usernames and passwords on MS-SQL (1433)? Test for blank SA passwords etc..? Let it roam inside a private net? Open source..modify and have fun...turn it into a brute forcer - whatever... Enjoy. Roelof. PS: found a way to DOS the service as well. Mail was sent to M$. Let's see what they come up with. Fiddle with the space allocated to the username and password... Eeye might even come up with a sweet buffer overflow..who knows?? ------------------------------------------------------ Roelof W Temmingh SensePost IT security roelof () sensepost com +27 83 448 6996 http://www.sensepost.com http://www.hackrack.com
Attachment:
senseql
Description:
---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
Current thread:
- PERL based MS-SQL username/password checker RT (Nov 08)