Hi Chris.

To my knowledge no, but if that DBMS server is exposed you can always try
brute forcing it directly (e.g.
http://www.offensive-security.com/metasploit-unleashed/MSSQL_Bruter)

Kind regards,
Miroslav Stampar

On Mon, Apr 23, 2012 at 10:52 PM, Chris Oakley <christopher.oak...@gmail.com
> wrote:

> Hi All
>
> Not directly sqlmap related, but I thought someone might have an insight
> to help me out.
>
> In MS SQL Server 2005+, are there any techniques that can be used to brute
> force the sa password assuming openrowset is not available (as is the case
> by default) via SQL injection, or is it not possible?
>
> Regards
>
> Chris
>
>
> ------------------------------------------------------------------------------
> For Developers, A Lot Can Happen In A Second.
> Boundary is the first to Know...and Tell You.
> Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
> http://p.sf.net/sfu/Boundary-d2dvs2
>
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users

Reply via email to