May 2017
Intermediate to advanced
416 pages
21h 33m
English
Use the following Nmap command to obtain information from MS SQL servers with NTLM authentication:
$nmap -p1433 --script ms-sql-ntlm-info <target>
The results will include NetBIOS, DNS, and OS build version information in the script output section, as follows:
1433/tcp open ms-sql-s | ms-sql-ntlm-info: | Target_Name: TESTSQL | NetBIOS_Domain_Name: TESTSQL | NetBIOS_Computer_Name: DB-TEST | DNS_Domain_Name: 0xdeadbeefcafe.com | DNS_Computer_Name: db-test.0xdeadbeefcafe.com | DNS_Tree_Name: 0xdeadbeefcafe.com |_ Product_Version: 6.1.7420
Read now
Unlock full access