Ppl,
Always wanted a PERL based script that could test for usernames and passwords
on MS-SQL (1433)? Test for blank SA passwords etc..? Let it roam inside a
private net? Open source..modify and have fun...turn it into a brute forcer -
whatever...
Enjoy.
Roelof.
PS: found a way to DOS the service as well. Mail was sent to M$. Let's see what
they come up with. Fiddle with the space allocated to the username and
password... Eeye might even come up with a sweet buffer overflow..who knows??
------------------------------------------------------
Roelof W Temmingh SensePost IT security
roelof_at_sensepost.com +27 83 448 6996
http://www.sensepost.com http://www.hackrack.com
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
Received on Nov 09 2001