Penetration Testing mailing list archives
RE: MS SQL MDF FILE
From: "Sanders, Jonathan" <Jonathan.Sanders () healthsouth com>
Date: Mon, 14 Mar 2005 10:49:07 -0600
For things like this, I keep a copy of MSDE running on my laptop that I can attach any MDF files to. You can get it here, it's free: http://www.microsoft.com/sql/msde/default.asp YMMV... Jonathan -----Original Message----- From: Felikz [mailto:securityfocus () felikz net] Sent: Monday, March 14, 2005 10:02 AM To: Irvin Temp Cc: pen-test () securityfocus com Subject: Re: MS SQL MDF FILE You should be able to "attach" it to any other SQL Server, one step of this is to select the database owner thus giving you full access to it's contents. Irvin Temp wrote:
Im currently doing a VA of our MS SQL Database servers. I was able to download a backup of our MDF file from one of the DB Server. When i open the MDF file using "vi" editor in UNIX, the file appears to be cryptic. Is there a way to decipher the contents of the file. I would like to show the to the full extent of the risks involved when an MDF file has been captured from a database server. Thanks! Regards, HY
Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please notify me immediately by replying to this message and deleting it from your computer. Thank you.
Current thread:
- MS SQL MDF FILE Irvin Temp (Mar 14)
- Re: MS SQL MDF FILE Felikz (Mar 14)
- <Possible follow-ups>
- RE: MS SQL MDF FILE Sanders, Jonathan (Mar 14)