mssql agentless scan did not work

GoogleCodeExporter commented 8 years ago

What steps will reproduce the problem?
1.Create MSSQL 2012 database
1.Create a scan profile for mssql 2012 server
2.start scanning on ip address of the MSSQL

What is the expected output? What do you see instead?
The expected output should report on findings of the credit card i inserted 
into the mssql database. But i instead it did not shows any finding nor shows 
any database or table that been scanned 

What version of the product are you using? On what operating system?
opendlp 0.5.1 on window 7 and window server 2012

Please provide any additional information below.
I already try to scan with ip address\server instance and input in the login 
credentials for mssql but i still did not see any outcome on credit cards 
finding. Please help i already try this on mssql installed on window 7 and 
window server 2012

Original issue reported on code.google.com by jonathan...@gmail.com on 25 Nov 2013 at 9:57

Attachments:

GoogleCodeExporter commented 8 years ago

some correction i attempt to test the mssql agentless scanning on microsoft sql 
server express edition

Original comment by jonathan...@gmail.com on 26 Nov 2013 at 2:25

GoogleCodeExporter commented 8 years ago

I did not test this with Express Edition. I only can confirm it works with SQL 
Server proper.

Original comment by andrew.O...@gmail.com on 26 Nov 2013 at 3:11

GoogleCodeExporter commented 8 years ago

Hi andrew,

sorry i cannot found any download in google for sql server proper 

can send me the link where you download sql server proper for me to test with 
opendlp

thank you

Original comment by jonathan...@gmail.com on 27 Nov 2013 at 2:43

GoogleCodeExporter commented 8 years ago

Hi andrew,

if i were not mistaken we need to add the OpenDLP ip address permission and
privileges to access to the database. I already try to allow the opendlp to
access to the database in MySQL and it worked. OpenDLP was able to scan the
MySQL.

But i have no ides how to do that for MSSQL asl i'm still unable to allow
the opendlp to access to the mssql.

Any idea?

Original comment by jonathan...@gmail.com on 28 Nov 2013 at 6:30

GoogleCodeExporter commented 8 years ago

You need to use SQL configuration manager, and enable TCPIP as it's disabled by 
default under Express edition (defaults to named pipes)

Original comment by martin.a...@gmail.com on 28 Nov 2014 at 5:06

jbenz / opendlp

mssql agentless scan did not work #106