WebApp Sec mailing list archives
Re: WebSleuth and the SQLInjeciton Plugin
From: "Chip Andrews" <chipandrews () usa net>
Date: Mon, 10 Mar 2003 13:01:15 -0500
Phil, Try running SQL Profiler at the same time you are implementing the plug-in. By looking at the last statement issued, and then running it manually in the Query Analyzer using the same credentials you provided to the plug-in you should get a more detailed error message that may help you identify the problem. Also - make sure you have the application set to "SQL Server and Windows Authentication". Since the plug-in uses the 'sa' account to authenticate, if your SQL Server is in "Windows Auth" mode then native SQL Server accounts will not be able to authenticate. Feel free to write me directly if you have further issues. Chip Andrews chip () sqlsecurity com www.sqlsecurity.com ----- Original Message ----- From: "Phil Cox" <Phil.Cox () SystemExperts com> To: <webappsec () securityfocus com> Sent: Monday, March 10, 2003 12:28 PM Subject: WebSleuth and the SQLInjeciton Plugin
All, I am trying to get the SQL injection plug-in to work, but to no avail. I have an MSSQL server (on a separate box), but get the following error when trying the test against a web site: "There was an error creating the trace. Operation aborting. Please check the SQL server credentials." I know I have the right password. Any thoughts? Phil
Current thread:
- Re: SQL Injection Basics, (continued)
- Re: SQL Injection Basics Alex Russell (Feb 11)
- Re: SQL Injection Basics Sverre H. Huseby (Feb 11)
- Re: SQL Injection Basics dreamwvr () dreamwvr com (Feb 11)
- Re: SQL Injection Basics Sverre H. Huseby (Feb 11)
- Re: SQL Injection Basics Alex Russell (Feb 11)
- Re: SQL Injection Basics Jerry Connolly (Feb 11)
- Re: SQL Injection Basics dreamwvr () dreamwvr com (Feb 11)
- Re: SQL Injection Basics Jerry Connolly (Feb 11)
- Re: SQL Injection Basics Ken Anderson (Feb 11)
- Re: WebSleuth and the SQLInjeciton Plugin Chip Andrews (Mar 10)
- Re: SQL Injection Basics Kevin Spett (Feb 11)
- RE: SQL Injection Basics Patrick Debois (Feb 11)