GCIH · Question #273
Which of the following tools can be used to perform brute force attack on a remote database? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. SQLBF B. SQLDict C. FindSA. SQLBF, SQLDict, and FindSA are dedicated tools for brute forcing and dictionary attacking SQL Server credentials, while nmap is a general-purpose network scanner not designed for this purpose.
Question
Which of the following tools can be used to perform brute force attack on a remote database? Each correct answer represents a complete solution. Choose all that apply.
Options
- ASQLBF
- BSQLDict
- CFindSA
- Dnmap
How the community answered
(18 responses)- A89% (16)
- D11% (2)
Why each option
SQLBF, SQLDict, and FindSA are dedicated tools for brute forcing and dictionary attacking SQL Server credentials, while nmap is a general-purpose network scanner not designed for this purpose.
SQLBF is a SQL Server-specific brute force tool that systematically attempts password combinations against SA and other SQL Server accounts over the network.
SQLDict performs dictionary-based password attacks against SQL Server instances, automating credential guessing using wordlists.
FindSA is designed to locate SQL Server installations and perform brute force attacks specifically against the SA (System Administrator) account.
nmap is a network discovery and port scanning utility; although its scripting engine includes some basic database scripts, it is not a dedicated database brute force tool.
Concept tested: SQL Server database brute force tool identification
Topics
Community Discussion
No community discussion yet for this question.