Re: Database pen-testing tools

["Thor (Hammer of God)" <thor () hammerofgod com>]

As leaders in database vulnerability research, NGS Software has some 
excellent audit and assessment tools available for database installations. 
You can check them out at:
www.ngssoftware.com

Word on the street is that some dude named "Tim Mullen" or some such just 
started working with them, and he seems to be a nice enough guy, so I'll go 
out on a limb and recommend NGS as well ;)

t

----- Original Message ----- 
From: "Erin Carroll" <amoeba () amoebazone com>
To: <pen-test () securityfocus com>
Sent: Friday, May 18, 2007 12:22 PM
Subject: Database pen-testing tools


> List members,
>
> Does anyone have some suggestions or experience with database-specific
> pen-testing tools that you would recommend? I am by no stretch of the
> imagination a DBA (I run at the first sign of the words "Relational
> Database") so tools that don't require a large amount of DBA-ish 
> background
> to use to their full potential would be of particular interest.
>
> The database testing market seems to be growing rapidly now and some
> recommendations of tools to look at would be useful. I've played around 
> with
> NGSSquirrel, AppSec, have experience with some Oracle-specific tools of
> course...and ran into a new player in the market (Securno) at InfoSec
> Europe. Just wondering what other players are out there that are effective
> or you've played with.
>
>
> --
> Erin Carroll
> Moderator
> SecurityFocus pen-test list
> "Do Not Taunt Happy-Fun Ball"
>
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Are you using SPI, Watchfire or WhiteHat?
> Consider getting clear vision with Cenzic
> See HOW Now with our 20/20 program!
>
> http://www.cenzic.com/c/2020
> ------------------------------------------------------------------------


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------