| Reply To Message: |
| Posted By |
n/a on 2/20/2006 7:46:00 PM |
| Subject: |
|
| Message: |
The user list and password lists are simply text files with lists of user names and password that you'd like to attempt to use to access the SQL Server instance. The size of those files depends on how comprehensive you want the scans to be.
SQLRecon will find more instances that SQLPing because it uses multiple discovery techniques -not just a UDP 1434 discovery packet like SQLPing. If you're trying to find SQL Servers - use SQLRecon. If you're trying to test a SQL Server for weak passwords - use SQLPing2 or any of the other tools (SQLbf, etc) that test for weak SQL passwords. |
|