Penetration Testing mailing list archives

Re: MS SQL MDF FILE


From: Felikz <securityfocus () felikz net>
Date: Mon, 14 Mar 2005 16:01:50 +0000

You should be able to "attach" it to any other SQL Server, one step of this is to select the database owner thus giving you full access to it's contents.

Irvin Temp wrote:

Im currently doing a VA of our MS SQL Database
servers. I was able to download a backup of our MDF file from one of the DB Server.

When i open the MDF file using "vi" editor in UNIX,
the file appears to be cryptic. Is there a way to decipher

the contents of the file. I would like to show the to
the
full extent of the risks involved when an MDF file has

been captured from a database server.

Thanks!

Regards,

HY


__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com


Current thread: