Re: [PEN-TEST] Informix

["Hoz, Martin" <mhoz () CITI COM MX>]

The first thing that comes to my mind is try to use
"informix:informix" as username and password at
the UNIX login prompt...

Other issue: try to sniff the informix user password.
;-) (Only possible, of course, if the don't have any
encryption technology in place).

I don't know about any automated tool like DBScanner
for Informix, but I was a Junior DBA a few years ago.
And if you have  access to the infomix account, you
can modify configuration (~/etc/onconfig) you may be
able to edit default dbspaces (dbaccess), shutdown
databases (onstat ) and such kind of things...

Very similar to the oracle account for ORACLE databases.

This may not be the answer you're looking for, but I
hope this helps in any way. :-)

Regards

--
Martin Humberto Hoz Salvador
Information Security Consultant (ISS ICU, Check Point CCSE)
Corporacion en Investigacion Tecnologica e Informatica, S.A. de C.V.
Sendero Sur  285  Col. Contry,  Monterrey,  Nuevo Leon 64860, MEXICO
Phone: +(52)(8) 357-2267 x135   Fax: +(52)(8) 357-8047
E-mail: mhoz () citi com mx        WWW:  http://www.citi.com.mx
PGPKey ID: 0x0454E8D9           ICQ Number: 31631540

"Customer service is not a department... it's an attitude"