Re: DATABASE IDENTIFICATION

Tobias Svennebring (d92-tsv_at_nada.kth.se) wrote:
: Hi
 

: I wonder if someone could tell me special signs that makes it possible to
: decide
: * what kind of database that is running on a certain server,
: * if there is an database there at all
: * and what version it is?
 

: The signs could decide it definitely or just be a hint of what it might
: be. Examples of areas that I can come up with that might be good places
: to find signs in are:
: ports - if usually special ports are used for certain databases
: users - if certain users usually are used for certain databases, such as
: the "oracle"-user for oracle, which might be reached with finger.
: groups - (as with users).
: ??
: anything ... ODBC stuff, sniffed traffic ???
: ??
: Especially I'm intressted i Informix and Oracle signs, but everything is
: very welcome and appreciated.
 

: If you know of intresting areas that might lead in the right direction,
: I'm eager to hear about that too.
 

: Please answer to
: d92-tsv_at_nada.kth.se
 

: Thanks
: Tobias Svennebring

Tobias,

From looking at some of your other postings in other groups, it looks to me like you're building something similar to the inference engines found in SATAN and/or COPS. The engine in COPS is an automated tool that helps crackers break into OS's. Are you building the same thing to crack databases?

I'm certainly not interested in helping you learn to hack database systems, and I think that most of the other users here would also feel a few qualms about this also. Please correct me if I've misread your intentions.

Joe

-- 
---------------------------------------------------------------------------
Joe Lumbley(jlumbley_at_netcom.com)   		
---------------------------------------------------------------------------