Retrieving information from MS SQL servers
System administrators and penetration testers often need to gather as much host information as possible. MS SQL databases are common in infrastructures based on Microsoft technologies, and Nmap can help us gather information from them such as the version number, product, and instance name.
This recipe shows how to retrieve information from an MS SQL server with Nmap.
How to do it...
To retrieve information from a MS SQL server with Nmap, run the following command:
$ nmap -p1433 --script ms-sql-info <target>
MS SQL server information, such as instance name, version number, and port, will be included in the script output:
PORT STATE SERVICE 1433/tcp open ms-sql-s Host script results: | ms-sql-info: | Windows server name: CLDRN-PC | [192.168.1.102\MSSQLSERVER] | Instance name: MSSQLSERVER | Version: Microsoft SQL Server 2011 | Version number: 11.00.1750.00 | Product: Microsoft...