Update : MSSQLScan v0.8.4

There are lots of updates and one of then is MSSQLScan v0.8.4 .

This tool focus on MSSQL database. Audit your database and find the missing security links before someone else dose.

A small multi-threaded tool that scans for Microsoft SQL Servers. The tool does it’s discovery by using UDP and returns a list of all detected instances with there respective protocols and ports.

How to use MSSQLScan?

MSSQLScan -t <target_ip> [options]

Options:
-t <target> – target ip address(es)
-l <targetfile> – file with target ip adresses
-s <src> – source ip address
-T <threads> – maximum threads (default 50)
-v – verbose logging
-w <timeout> – timeout for replies (default 500 ms)
-o <file> – output to file

Sample:

MSSQLScan -t 172.16.1-2.* -o results.txt

MSSQLScan is written in Java so it is operating system independent. So you can easily extract its source code.

Download MSSQLScan version 0.8.4 here

If you enjoyed this article, you might also like:

• October 28, 2009 -- Scrawlr – Tool for finding SQL Injection
  Scrawlr, developed by the HP Web Security Research Group in coordination with the MSRC, is short for...
• September 4, 2009 -- mysqloit – A SQL Injection takeover tool
  MySqloit is a SQL Injection takeover tool focused on LAMP (Linux, Apache,MySql,PHP) and WAMP (Window...
• July 1, 2010 -- UPDATE: Bsqlbf v2.6!
  This update is huge for all Bsqlbf lovers like us! Bsqlbf is updated about which, we have talked in ...
• April 16, 2010 -- UPDATE: bsqlbfv2.5!
  bsqlbf is updated about which, we have talked in detail here"bsqlbf is a perl script that allows...
• April 11, 2010 -- SFX-SQLi: A new SQL injection technique tool!
  SFX-SQLi or Select For XML SQL injection is a new SQL injection technique that allows to extract the...
• March 15, 2010 -- UPDATE: sqlmap 0.8 Final!
  We wrote about sqlmap version 0.8 RC 1 being released here. Now, the author Bernardo Damele A. G. ha...
• February 4, 2010 -- UPDATE: CAT.NET 2.0 – Beta!
  We have previously written about Microsoft CAT.NET here. Now, the Microsoft Security Tools team has ...
• January 29, 2010 -- SecuBat – A Modular Web Vulnerability Scanner!
  We were actually waiting for a release of this scanner since the day a paper about it was presented ...
• January 27, 2010 -- WITOOL: A web SQL Injection Tool!
  WITOOL is a SQL injection tool powered by .NET (2.0), for SQL Server, Oracle, Error Base and Union B...

Tagged as: database security, MSSQLScan, SQL Injection, Vulnerability Scanner