Home page logo

pen-test logo Penetration Testing mailing list archives

MSSQL tools
From: "Jeff Thomas" <jeff () severus org>
Date: Fri, 8 Mar 2002 08:27:09 -0500

I wrote a couple of new tools for pen-testing MSSQL servers.  I wrote them
OpenBSD, but they should work on any *nix.

sqlcmd.c - MSSQL "shell"
sql-bugger - Uploads and compiles an exe through MSSQL

I tested them against MSSQL 6.5, but they should work on 7 with SQL
authentication as well.
Both of these tools use a replay of an isql_w session.



This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:

  By Date           By Thread  

Current thread:
  • MSSQL tools Jeff Thomas (Mar 08)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]