xSQLScanner – Database Password Cracker & Security Audit Tool For MS-SQL & MySQL

Comments

1. cypherinfo says

   February 16, 2012 at 1:27 pm

   What is the way to decipher a password as you may see it in a mysql table from MD5?

   Thank you.

2. Bogwitch says

   February 17, 2012 at 10:01 am

   You can’t decipher an MD5 hash. What you can do is generate hashes from known plaintext to see if they match the MD5. Whether that is generated from a dictionary, brute force or pre-computed rainbow tables is up to you.
   for a good video that explains password hashing, go here http://www.youtube.com/watch?v=FYfMZx2hy_8

   • cypherinfo says

     February 19, 2012 at 11:49 am

     Thank you for your interest; great video! One thing only: what is the exact term used for the algorithm: “saw”, “aught”?

     Thank you.

3. D3F says

   February 19, 2012 at 10:45 am

   4share was verry slow overhere. So i post a mirror on Docsbird.com

   http://docsbird.com/?p=getfile&id=49da0bbc5d782dd140623fa735f9fd94c9411956

4. Mr H says

   February 23, 2012 at 10:55 pm

   Thanks for posting this. DB security for some reason is consistently ignored in most organizations. Having an auditing tool to ensure the security of data warehouses is extremely important.

5. infodox says

   March 25, 2012 at 3:16 pm

   Not entirely how much this differs from a sexed-up nmap/hydra combination, but it is still good to have a “clicky” tool – especially when doing a demo for an idiot CSO. I am not sure though… Does this have any serious performance benefits compared to hydra or ncrack?

   • Darknet says

     March 26, 2012 at 7:21 am

     Honestly not sure how well this would scale for large audits, I haven’t tested it extensively.

     I’d be interested if anyone has any feedback though.