cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5bd27c130b
openbsd-ports/security/sqlat/patches/patch-sqldict_c

34 lines
902 B
Plaintext
Raw Normal View History

sqlat crashed with freetds-0.60 update (API change with no rev bump :<) Thanks to jcs@ for patch assist and testing.
2002-09-23 22:21:43 -04:00
$OpenBSD: patch-sqldict_c,v 1.2 2002/09/24 02:21:44 mark Exp $
--- sqldict.c.orig Mon Dec 3 11:51:11 2001
+++ sqldict.c Sun Sep 22 23:32:40 2002
SQLAT is a suite of tools which could be useful for pentesting a MS SQL Server. The tools are still in development but tend to be quite stable. The tools do dictionary attacks, upload files, read registry and dump the SAM. They do this by wrapping extended stored procedures. There is also a tool for doing a minimal analysis of a SQL Server with output as HTML. You need to be 'sa' to run some of the tools, but this usually isn't a problem. The tool temporarily restores the xp_cmdshell if it is removed and the dll is still left on the system. SQLAT works over port 1433, it doesn't do named pipes. It doesn't do integrated security either. This is because it is based on the FreeTDS driver from www.freetds.org. WWW: http://www.cqure.net/
2002-08-26 03:37:59 -04:00
@@ -21,7 +21,6 @@
#include "sqldict.h"
#include "constants.h"
#include "util.h"
-#include <getopt.h>
/*
Set a few default values
sqlat crashed with freetds-0.60 update (API change with no rev bump :<) Thanks to jcs@ for patch assist and testing.
2002-09-23 22:21:43 -04:00
@@ -73,7 +72,8 @@ void initArguments(ARGS *pArgs) {
int doHack(const ARGS *pArgs) {
TDSLOGIN *login;
- TDSSOCKET *tds;
+ TDSSOCKET *tds;
+ TDSCONTEXT *context = NULL;
char user[64];
char pass[64];
char ip[16];
@@ -100,8 +100,9 @@ int doHack(const ARGS *pArgs) {
tds_set_server(login, ip);
SQLAT is a suite of tools which could be useful for pentesting a MS SQL Server. The tools are still in development but tend to be quite stable. The tools do dictionary attacks, upload files, read registry and dump the SAM. They do this by wrapping extended stored procedures. There is also a tool for doing a minimal analysis of a SQL Server with output as HTML. You need to be 'sa' to run some of the tools, but this usually isn't a problem. The tool temporarily restores the xp_cmdshell if it is removed and the dll is still left on the system. SQLAT works over port 1433, it doesn't do named pipes. It doesn't do integrated security either. This is because it is based on the FreeTDS driver from www.freetds.org. WWW: http://www.cqure.net/
2002-08-26 03:37:59 -04:00
tds_set_passwd(login, pass);
tds_set_user(login, user);
sqlat crashed with freetds-0.60 update (API change with no rev bump :<) Thanks to jcs@ for patch assist and testing.
2002-09-23 22:21:43 -04:00
-
SQLAT is a suite of tools which could be useful for pentesting a MS SQL Server. The tools are still in development but tend to be quite stable. The tools do dictionary attacks, upload files, read registry and dump the SAM. They do this by wrapping extended stored procedures. There is also a tool for doing a minimal analysis of a SQL Server with output as HTML. You need to be 'sa' to run some of the tools, but this usually isn't a problem. The tool temporarily restores the xp_cmdshell if it is removed and the dll is still left on the system. SQLAT works over port 1433, it doesn't do named pipes. It doesn't do integrated security either. This is because it is based on the FreeTDS driver from www.freetds.org. WWW: http://www.cqure.net/
2002-08-26 03:37:59 -04:00
- if( (tds = tds_connect(login)) !=NULL ) {
sqlat crashed with freetds-0.60 update (API change with no rev bump :<) Thanks to jcs@ for patch assist and testing.
2002-09-23 22:21:43 -04:00
+
+ context = tds_alloc_context();
+ if( (tds = tds_connect(login, context, NULL)) !=NULL ) {
SQLAT is a suite of tools which could be useful for pentesting a MS SQL Server. The tools are still in development but tend to be quite stable. The tools do dictionary attacks, upload files, read registry and dump the SAM. They do this by wrapping extended stored procedures. There is also a tool for doing a minimal analysis of a SQL Server with output as HTML. You need to be 'sa' to run some of the tools, but this usually isn't a problem. The tool temporarily restores the xp_cmdshell if it is removed and the dll is still left on the system. SQLAT works over port 1433, it doesn't do named pipes. It doesn't do integrated security either. This is because it is based on the FreeTDS driver from www.freetds.org. WWW: http://www.cqure.net/
2002-08-26 03:37:59 -04:00
fprintf(stdout, "IP: %-15s User: %-14s Pass: %-14s\n",
ip, user, pass);
Reference in New Issue Copy Permalink