Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 57 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Ms Sql Server Connection Refused
EH-Net
May 19, 2013, 10:58:02 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Ms Sql Server Connection Refused  (Read 3852 times)
0 Members and 1 Guest are viewing this topic.
skorpinok
Newbie
*
Offline Offline

Posts: 36


View Profile
« on: June 14, 2012, 09:58:48 AM »

Hello,
I have Backtrack 5R2 & Windows XP SP2 machine with Microsoft's SQL Server 2005 Express installed in virtual box, when i try to Brute Forcing MS SQL Server i get Bruteforce cancelled against this service. Enable verbose output for service-specific details. please let me know if you have any idea how to solve this ?

Best Regards.
skorpinok
Logged
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #1 on: June 14, 2012, 11:25:27 AM »

Check to see if sql (tcp 1433 by default) is bound to 127.0.0.1
Logged

skorpinok
Newbie
*
Offline Offline

Posts: 36


View Profile
« Reply #2 on: June 15, 2012, 10:19:09 AM »

Check to see if sql (tcp 1433 by default) is bound to 127.0.0.1

here is the info is it correct..?

C:\Documents and Settings\Navya mdas>netstat -ano

Active Connections

  Proto  Local Address          Foreign Address        State           PID
  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING       1152
  TCP    0.0.0.0:445            0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:3389           0.0.0.0:0              LISTENING       1040
  TCP    0.0.0.0:31337          0.0.0.0:0              LISTENING       1232
  TCP    10.0.2.15:139          0.0.0.0:0              LISTENING       4
  TCP    10.0.2.15:1087         74.208.46.66:80   CLOSE_WAIT      2356
  TCP    10.0.2.15:1088         74.208.46.66:80   CLOSE_WAIT      2356
  TCP    10.0.2.15:1091         173.194.34.109:80      ESTABLISHED     2356
  TCP    10.0.2.15:1092         173.194.34.122:80      ESTABLISHED     2356
  TCP    10.0.2.15:1093         173.194.34.109:80      ESTABLISHED     2356
  TCP    10.0.2.15:1094         208.66.65.196:80       CLOSE_WAIT      2356
  TCP    10.0.2.15:1433         0.0.0.0:0              LISTENING       2516
  TCP    127.0.0.1:1032         0.0.0.0:0              LISTENING       1872
  TCP    127.0.0.1:1433         0.0.0.0:0              LISTENING       2516
  TCP    192.168.56.101:139  0.0.0.0:0              LISTENING       4
  TCP    192.168.56.101:14330.0.0.0:0               LISTENING       2516
  UDP    0.0.0.0:445            *:*                                    4
  UDP    0.0.0.0:500            *:*                                    828
  UDP    0.0.0.0:1050           *:*                                    1452
  UDP    0.0.0.0:1434           *:*                                    1504
  UDP    0.0.0.0:4500           *:*                                    828
  UDP    10.0.2.15:123          *:*                                    1396
  UDP    10.0.2.15:137          *:*                                    4
  UDP    10.0.2.15:138          *:*                                    4
  UDP    10.0.2.15:1900         *:*                                    1524
  UDP    127.0.0.1:123          *:*                                    1396
  UDP    127.0.0.1:1049         *:*                                    2356
  UDP    127.0.0.1:1900         *:*                                    1524
  UDP    192.168.56.101:123     *:*                                    1396
  UDP    192.168.56.101:137     *:*                                    4
  UDP    192.168.56.101:138     *:*                                    4
  UDP    192.168.56.101:1900    *:*                                    1524

C:\Documents and Settings\Navya mdas>
Logged
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #3 on: June 15, 2012, 10:21:35 AM »

Your problem is here:
TCP    127.0.0.1:1433         0.0.0.0:0              LISTENING       2516

If you're trying to access this box remotely, it wont work bound to 127.0.0.1

You need to bind sql to 0.0.0.0 or your actual IP.
Logged

skorpinok
Newbie
*
Offline Offline

Posts: 36


View Profile
« Reply #4 on: June 15, 2012, 10:55:23 AM »

Your problem is here:
TCP    127.0.0.1:1433         0.0.0.0:0              LISTENING       2516

If you're trying to access this box remotely, it wont work bound to 127.0.0.1

You need to bind sql to 0.0.0.0 or your actual IP.

How do i bind it sir ? suggest any info..or link might be helpful, however in sql server configuration manager /TCP/IP Properties. i have the following settings( could not attach the image due to size limit sorry) is there anything i should change?

under ip tab

IP1

Active                                       -yes
enabled                                    -yes
ip address                                 -192.168.56.101
tcp dyanamic ports
tcp port                                     -1433

IP2

Active                                        -yes
enabled                                     -yes
ip address                                  -127.0.0.1
tcp dyanamic ports
tcp port                                      -1433

IP3
Active                                         -yes
enabled                                      -yes
ip address                                   -10.0.2.15
tcp dynamic ports
tcp port                                        -1433
 


Logged
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #5 on: June 15, 2012, 11:05:17 AM »

If you want it to be accessible from any IP, i would remove all those entries and replace it with 0.0.0.0 then restart the service.
Logged

skorpinok
Newbie
*
Offline Offline

Posts: 36


View Profile
« Reply #6 on: June 16, 2012, 12:26:12 AM »

If you want it to be accessible from any IP, i would remove all those entries and replace it with 0.0.0.0 then restart the service.

Thank you..very much sir for your kind advice.as u said i removed the entries & replaced with 0.0.0.0 for IP 2 & IP 3. it worked 100%..

Regards
skorpinok.
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.074 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.