Ppl,
Always wanted a PERL based script that could test for usernames and passwords
on MS-SQL (1433)? Test for blank SA passwords etc..? Let it roam inside a
private net? Open source..modify and have fun...turn it into a brute forcer -
whatever...
Enjoy.
Roelof.
PS: found a way to DOS the service as well. Mail was sent to M$. Let's see what
they come up with. Fiddle with the space allocated to the username and
password... Eeye might even come up with a sweet buffer overflow..who knows??
------------------------------------------------------
Roelof W Temmingh SensePost IT security
roelof_at_sensepost.com +27 83 448 6996
http://www.sensepost.com http://www.hackrack.com
Received on Nov 08 2001