jetlib.sec » Tags » ms-sql-server

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

13 items tagged "ms sql server"

Related tags: sql [+], server [+], total [+], suite [+], sql server 2005 express [+], soap request [+], defense [+], cesar cerrudo [+], sql server security [+], sql server 2005 [+], sql en mssql hacktimes [+], security [+], proof of concept [+], ms sql server 2005 [+], microsoft sql server [+], inyeccion [+], com [+], clr [+], chip andrews [+], black hat [+], aaron newman [+], usa [+], typical error message [+], sql server version [+], security authors [+], security 2002 [+], security 2001 [+], read [+], paper [+], oracle database server [+], oracle [+], hunting [+], hacking [+], fingerprint [+], database [+]

• December 23, 2011
• 21:28

  [Slides] Demystifying MS SQL Server & Oracle Database Server Security

   » ‎ SecDocs
  Authors: Cesar Cerrudo
  Tags: SQL Server Oracle
  Event: Black Hat USA 2005
  

  Tags:  server oracle sql cesar-cerrudo usa oracle-database-server ms-sql-server security-authors  

• November 23, 2011
• 21:44

  [Slides] MS SQL Server Security Mysteries Explained

   » ‎ SecDocs
  Authors: Chip Andrews
  Tags: SQL Server
  Event: Black Hat Windows Security 2002
  

  Tags:  server sql security chip-andrews sql-server-security ms-sql-server security-2002  

• November 05, 2011
• 7:55

  [Slides] MS SQL Server Security Overview

   » ‎ SecDocs
  Authors: Chip Andrews
  Tags: SQL Server
  Event: Black Hat Windows Security 2001
  

  Tags:  server sql security chip-andrews sql-server-security ms-sql-server security-2001  

• October 19, 2011
• 23:54

  [Paper] Hunting Flaws in MS SQL Server

   » ‎ SecDocs
  Authors: Aaron Newman Cesar Cerrudo
  Tags: SQL Server
  Event: Black Hat Windows Security 2003
  

  Tags:  server sql paper cesar-cerrudo aaron-newman ms-sql-server black-hat  

• 23:54

  [Slides] Hunting Flaws in MS SQL Server

   » ‎ SecDocs
  Authors: Aaron Newman Cesar Cerrudo
  Tags: SQL Server
  Event: Black Hat Windows Security 2003
  

  Tags:  server hunting sql cesar-cerrudo aaron-newman ms-sql-server black-hat  

• October 04, 2011
• 13:01

  CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits an sql injection flaw in CA Total Defense Suite R12. When supplying a specially crafted soap request to '/UNCWS/Management.asmx', an attacker can abuse the reGenerateReports stored procedure by injecting arbitrary sql statements into the ReportIDs element. NOTE: This Metasploit module was tested against the MS SQL Server 2005 Express that's bundled with CA Total Defense Suite R12. CA's Total Defense Suite real-time protection will quarantine the default framework executable payload. Choosing an alternate exe template will bypass the quarantine.

  Tags:  total suite defense ms-sql-server soap-request sql-server-2005-express  

• 13:01

  CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits an sql injection flaw in CA Total Defense Suite R12. When supplying a specially crafted soap request to '/UNCWS/Management.asmx', an attacker can abuse the reGenerateReports stored procedure by injecting arbitrary sql statements into the ReportIDs element. NOTE: This Metasploit module was tested against the MS SQL Server 2005 Express that's bundled with CA Total Defense Suite R12. CA's Total Defense Suite real-time protection will quarantine the default framework executable payload. Choosing an alternate exe template will bypass the quarantine.

  Tags:  total suite defense ms-sql-server soap-request sql-server-2005-express  

• 13:01

  CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits an sql injection flaw in CA Total Defense Suite R12. When supplying a specially crafted soap request to '/UNCWS/Management.asmx', an attacker can abuse the reGenerateReports stored procedure by injecting arbitrary sql statements into the ReportIDs element. NOTE: This Metasploit module was tested against the MS SQL Server 2005 Express that's bundled with CA Total Defense Suite R12. CA's Total Defense Suite real-time protection will quarantine the default framework executable payload. Choosing an alternate exe template will bypass the quarantine.

  Tags:  total suite defense ms-sql-server soap-request sql-server-2005-express  

• October 12, 2010
• 0:41

  Exploit Next Generation SQL Fingerprint (ESF) – MS-SQL Server Fingerprinting Tool

   » ‎ Darknet
  SQL Server fingerprinting can be a time consuming process. It involves a lot many trial and error methods to fingerprint the exact SQL Server version. Intentionally inserting an invalid input to obtain a typical error message or using certain alphabets that are unique for a certain server are two of the ways to possibly fingerprint [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  fingerprint server sql read typical-error-message sql-server-version ms-sql-server database hacking  

• October 10, 2010
• 23:03

  MSSQL_CLR_Stored_Procedure_POC.zip

   » ‎ Packet Storm Security Recent Files
  Microsoft SQL Server supports so called CLR Stored Procedures which are written in a .NET language and are run directly inside MS SQL Server. If an hijacked account has appropriate permissions, it can be used to run a native payload (inject native code into a new thread) or to tunnel a TCP connection or a shell via the SQL port (needed if the database server is properly firewalled). They can also be combined to tunnel a reverse_tcp payload. Additional permissions, like xp_cmdshell, are not required. This file is a proof of concept that demonstrates this ability.

  Tags:  server clr sql ms-sql-server microsoft-sql-server proof-of-concept  

• 23:02

  MSSQL_CLR_Stored_Procedure_POC.zip

   » ‎ Packet Storm Security Exploits
  Microsoft SQL Server supports so called CLR Stored Procedures which are written in a .NET language and are run directly inside MS SQL Server. If an hijacked account has appropriate permissions, it can be used to run a native payload (inject native code into a new thread) or to tunnel a TCP connection or a shell via the SQL port (needed if the database server is properly firewalled). They can also be combined to tunnel a reverse_tcp payload. Additional permissions, like xp_cmdshell, are not required. This file is a proof of concept that demonstrates this ability.

  Tags:  server clr sql ms-sql-server microsoft-sql-server proof-of-concept  

• February 12, 2010
• 14:01

  Inyeccion-SQL-en-MSSQL-HackTimes.com.pdf

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called SQL Injection in MS-SQL Server 2005. Written in Spanish.

  Tags:  sql-en-mssql-hacktimes inyeccion com ms-sql-server sql-server-2005 ms-sql-server-2005  

• 14:00

  Inyeccion-SQL-en-MSSQL-HackTimes.com.pdf

   » ‎ Packet Storm Security Recent Files
  Whitepaper called SQL Injection in MS-SQL Server 2005. Written in Spanish.

  Tags:  sql-en-mssql-hacktimes inyeccion com ms-sql-server sql-server-2005 ms-sql-server-2005