Download Database Scanners

Database Scanners (Not in any order):
S.N.
Name
Brief Description
Open
Platform
Source?
No
Win
1
Shadow Database
Scanner
http://www.safetylab.com/en/products/
1.htm
Scans MSSql, Oracle,
IBMDB2,
MiniSql,MySQL, and
Lotus Domino
2
Acunetix Web
Vulnerability
Scanner
All-in-one web
vulnerability scanner
and database scanner
No
Win
A security auditing
tool for Oracle and
MS SQL Servers
No
Win, Linux
Yes
Win, Linux
http://www.acunetix.c
om/wvs/vulnerabilityscanner.htm
3
AuditPro Enterprise
http://www.nii.co.in/p
roducts.html
4
Oracle assessment
OScanner
http://www.cqure.net/ framework developed
in Java
tools.jsp?id=20
Functions
 Scans servers built practically
on any platform.
 Because of a fully open
(ActiveX-based) architecture
any professional with
knowledge of VC++, C++
Builder or Delphi may easily
expand the capabilities of the
Scanner.
 Detailed scan session log in
HTML, XML, PDF, RTF and
CHM (compiled HTML)
formats.
 Provides a fully featured web
security scanner, crawler,
report analysis tool, as well as
web security explanations, and
an extensive database of
security checks for all leading
web server platforms.
 It automatically detects, reports
& addresses outdated server
software
 A security assessment solution
featuring critical asset
identification, policy
compliance, risk analysis, real
time vulnerability views,
enhanced reporting capability,
graphical progress analysis etc.
 Supports multiple operating
systems and databases
Sid Enumeration
- Passwords tests (common &
dictionary)
- Enumerate Oracle version
- Enumerate account roles
- Enumerate account privileges
- Enumerate account hashes
- Enumerate audit information
5
AppSentry
http://www.integrigy.
com/appsentry9i.htm
Oracle Database
scanner. Supports
Oracle 8i, 9i, and 10g.
No
Win
6
AppDetective
http://www.appsecinc
.com/products/appdet
ective/
Network based
Database scanner
MySQL, Oracle,
Sybase, IBM DB2,
IBM DB2 on
Mainframe,
Microsoft SQL
Server, Oracle
Application Server,
Lotus Notes/Domino
No
Win
7
Symantec Enterprise
Security Manager™
for Databases 3.0
Application Modules
http://www.symantec.
com/region/can/eng/p
roduct/esm/databases
/
Oracle and DB2
Module based scanner
No
Win
8
SQLDict
A Dictionary attack
http://ntsecurity.nu/tool tool for SQL Server.
box/sqldict/
Freewar
e
Win
9
NGSSQL Crack
http://www.nextgenss.
com/sqlcrack.htm
No
Win
Password cracker for
MS SQL Server
- Enumerate password policies
- Enumerate database links
 The results are given in
graphical tree.
Detects security risks and
vulnerabilities within the Oracle
Database and associated
application. With over 100 audits
and checks specifically written for
the Oracle Database, AppSentry
automates and streamlines the
identification of vulnerabilities to
an extent not previously possible.
It discovers database applications
within your infrastructure and
assesses their security strength
AppDetective locates, examines,
reports, and fixes security holes
and misconfigurations.
The provided modules and
policies protect Oracle and DB2
databases from known security
vulnerabilities. The policies
introduce new, database-specific
executables and content,
including modules to check
password strength, patches, and
unneeded services.
Specify the target server IP
address, the target account name,
and select a password list file to
use for the dictionary attack.
It uses a dictionary of commonly
used passwords and produces a
hash for each entry then compares
it with the user's real password
hash. If they match then the
password has been found;
After a dictionary sweep
NGSSQLCrack will start to brute
force the password, trying varying
10
NGSSquirrel for
Oracle, SQL
http://www.nextgenss.
com/squirrelora.htm
A comprehensive
automated
vulnerability
assessment tool for
Oracle database
servers
No
Win Oracle, SQL
11
MetaCortex
http://www.metacorete
x.com/
Entirely JAVA
vulnerability scanning
framework that
emphasizes database.
Freewar
e
Independent.
JDBC Type
IV driver jars
– MS Sql,
MYSql
combinations of characters.
It identifies potential
vulnerabilities, misconfigurations
or backdoors which could lead to
the compromise of a server and its
data. It is capable of performing
the fullest audit of business risk
currently available in an Oracle
database scanner.