Microsoft SQL services NTLM Authentication Information Scanner

Details
Stay Up To Date
Asset Type

DOMAIN,IP

Need Membership

No

Asset Verify

No

API Support

Yes

Estimate Time (Second)

15

Microsoft SQL services NTLM Authentication Information Scanner Detail

This script enumerates information from remote Microsoft SQL services with NTLM authentication enabled.

Sending a MS-TDS NTLM authentication request with an invalid domain and null credentials will cause the remote service to respond with a NTLMSSP message disclosing information to include NetBIOS, DNS, and OS build version.

Some Advice for Common Problems

Related functionality should be disabled till it is necessary.

Need a Full Assessment?

Get help from professional hackers. Learn about our penetration test service now!

Request Pentest Service