[Snort-sigs] Rules for MS-SQL

Joseph Gama josephgama at ...144...
Wed Jul 14 13:13:44 EDT 2004


I made some rules for MS-SQL, dealing with SQL
injection, SQL ping and DOS, XP's with known overflow
vulnerabilities and access to system tables. These
rules are based on the work of Chris Anley and David
Litchfield from NGSSoftware, they deserve recognition
for their extraordinary work. Without their research
these rules wouldn't be here.
I used ARJ because it's free and works on 10 OS's.
I hope these rules will be helpful!


Joseph Gama

Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: SnortRul.arj
Type: application/octet-stream
Size: 510552 bytes
Desc: SnortRul.arj
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040714/00c6cdf4/attachment.obj>

More information about the Snort-sigs mailing list