[26153] in bugtraq
SQL Server passwords
daemon@ATHENA.MIT.EDU (patrik.karlsson@se.pwcglobal.com)
Fri Jul 12 17:29:20 2002
To: bugtraq@securityfocus.com
Message-ID: <OFC6F7B071.5613AC49-ONC1256BF4.006C640B@ema.pwcinternal.com>
From: patrik.karlsson@se.pwcglobal.com
Date: Fri, 12 Jul 2002 21:57:46 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Hi All,
First I would like to thank David for the research he has done on
passwords in SQL server.
Excellent work ! I fully agree that there is a need for a tool to perform
password audits on this system.
I looked in to this as soon as the paper was released and have produced an
auditing tool that is
released under GPL. It can be found at:
http://www.cqure.net/tools10.html
There are binaries for linux/windows and the full source ofcourse. It
performs OK on my 1 Ghz
laptop +- 750 000 guesses/sec.
Hope someone will find it usefull. I am open for comments, suggestions and
bugreports !
Regards,
Patrik Karlsson
_________________________________________________________________
The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you
received this in error, please contact the sender and delete the material
from any computer.
