SQLPWAudit

Status: Stable
Released: 2012-10-18
License: MIT License
⬇ Download SQLPWAudit v1.0.0.3 🔍 View all Releases

This is open source under the MIT License. You can obtain the source code from GitHub or browse the releases for source code associated with specific versions. If you make any changes which you feel improves this application, please feel free to submit a pull - request.

SQLPWAudit

SQLPWAudit (SQL PassWord Audit) is a very simple-to-use tool for recovering simple passwords or performing internal security audits.

Of course, a recovery/auditing engine is only about one third of the battle, you'll also need a good word list (see below) and one other thing which I cannot provide you: time!

Explanation of functionality SQLPWAudit is a very simple application, but it also implements parallel-processing capabilities and one hell of a permutation engine. Its use is simple: (1) download the application, (2) fire up the application and login to a SQL Server using an administrators account, (3) select the users which you wish to audit, (4) set advanced settings/or leave them alone then (5) click start.

All processing is performed on the computer which is actually running SQLPWAudit - in fact, the SQL server is only accessed one time to grab the users and their binary passwords - so this is perfectly safe to execute against a production server as long as SQLPWAudit is actually running on a non-production system.

Be sure to grab the most up-to-date version of our password list here:

Tags
auditing cracking security sql-server