Is there a software application that will probe a SQL server for vulnerabilities?

[oLLie]

Hi ATOT Software forum,

I was wondering if there was a software application that can test a SQL server database for any sort of vulnerabilities. Even some sort of hacking applications that could attack the server would be helpful to me. I'm very new to SQL servers, but my boss has asked me to try to find vulnerabilities or exploits in a database for one of his clients. Thanks!

Ollie

 

[KeyserSoze]

I doubt there are many programs designed specifically for this. Your best bet would be to go to the Manufacturer's page, and check for updates/patches, and WHAT they are supposed to fix.

Also, probe message boards regarding that software, and I'm SURE you'll find responses/threads regarding any known/unknown problems.

Unless I missed it, I didn't see what DBMS you were running. Post what you are using, and what company you work for, your username, password, and connection string, and I'm sure we can help you out. 😛 (Just kidding, don't do all of that.)




KeyserSoze

 

[Nothinman]

Nessus will probably work.

 

[edmicman]

theres microsofts basline security analyzer which is pretty good

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/Tools/mbsahome.asp

 

[oLLie]

Thanks guys, any others?