RE: SQL Server Scan

["Syed Khaden" <Syed () Secure-Bytes com>]

Hi I think you're looking these tools it should solved your query

http://www.secure-bytes.com/utilities.php

These are free tools which comes with Secure Auditor.

Good luck



-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of pma111
Sent: Thursday, July 23, 2009 4:54 AM
To: pen-test () securityfocus com
Subject: SQL Server Scan


Does anybody know of any SQL Server Vulnerability Scanner / tools that can
be
used (SQL Serv 2000)(enumate weak passwords, enumerate the various DB names,
enumerate SIDS -- if thats what they are called outside Oracle, identify
blank SA passwords, identify the key vulnerabilities etc)...

I have the IP of the SQL Server, and can run the testing interally within
the Network...

Any pointers welcome... I am trying to demonstrate how easy it is to get on
a DB on the Server by sitting on the Network, to demonstrate a threat from
within...
-- 
View this message in context:
http://www.nabble.com/SQL-Server-Scan-tp24623425p24623425.html
Sent from the Penetration Testing mailing list archive at Nabble.com.


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually
do a proper penetration test. IACRB CPT and CEPT certs require a full
practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------