.

Ms Sql Server Connection Refused

<<

skorpinok

Newbie
Newbie

Posts: 36

Joined: Thu Jun 14, 2012 9:48 am

Post Thu Jun 14, 2012 9:58 am

Ms Sql Server Connection Refused

Hello,
I have Backtrack 5R2 & Windows XP SP2 machine with Microsoft's SQL Server 2005 Express installed in virtual box, when i try to Brute Forcing MS SQL Server i get Bruteforce cancelled against this service. Enable verbose output for service-specific details. please let me know if you have any idea how to solve this ?

Best Regards.
skorpinok
<<

cd1zz

User avatar

Recruiters
Recruiters

Posts: 566

Joined: Sun Oct 03, 2010 9:01 pm

Post Thu Jun 14, 2012 11:25 am

Re: Ms Sql Server Connection Refused

Check to see if sql (tcp 1433 by default) is bound to 127.0.0.1
<<

skorpinok

Newbie
Newbie

Posts: 36

Joined: Thu Jun 14, 2012 9:48 am

Post Fri Jun 15, 2012 10:19 am

Re: Ms Sql Server Connection Refused

cd1zz wrote:Check to see if sql (tcp 1433 by default) is bound to 127.0.0.1


here is the info is it correct..?

C:\Documents and Settings\Navya mdas>netstat -ano

Active Connections

  Proto  Local Address          Foreign Address        State          PID
  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING      1152
  TCP    0.0.0.0:445            0.0.0.0:0              LISTENING      4
  TCP    0.0.0.0:3389          0.0.0.0:0              LISTENING      1040
  TCP    0.0.0.0:31337          0.0.0.0:0              LISTENING      1232
  TCP    10.0.2.15:139          0.0.0.0:0              LISTENING      4
  TCP    10.0.2.15:1087        74.208.46.66:80  CLOSE_WAIT      2356
  TCP    10.0.2.15:1088        74.208.46.66:80  CLOSE_WAIT      2356
  TCP    10.0.2.15:1091        173.194.34.109:80      ESTABLISHED    2356
  TCP    10.0.2.15:1092        173.194.34.122:80      ESTABLISHED    2356
  TCP    10.0.2.15:1093        173.194.34.109:80      ESTABLISHED    2356
  TCP    10.0.2.15:1094        208.66.65.196:80      CLOSE_WAIT      2356
  TCP    10.0.2.15:1433        0.0.0.0:0              LISTENING      2516
  TCP    127.0.0.1:1032        0.0.0.0:0              LISTENING      1872
  TCP    127.0.0.1:1433        0.0.0.0:0              LISTENING      2516
  TCP    192.168.56.101:139  0.0.0.0:0              LISTENING      4
  TCP    192.168.56.101:14330.0.0.0:0              LISTENING      2516
  UDP    0.0.0.0:445            *:*                                    4
  UDP    0.0.0.0:500            *:*                                    828
  UDP    0.0.0.0:1050          *:*                                    1452
  UDP    0.0.0.0:1434          *:*                                    1504
  UDP    0.0.0.0:4500          *:*                                    828
  UDP    10.0.2.15:123          *:*                                    1396
  UDP    10.0.2.15:137          *:*                                    4
  UDP    10.0.2.15:138          *:*                                    4
  UDP    10.0.2.15:1900        *:*                                    1524
  UDP    127.0.0.1:123          *:*                                    1396
  UDP    127.0.0.1:1049        *:*                                    2356
  UDP    127.0.0.1:1900        *:*                                    1524
  UDP    192.168.56.101:123    *:*                                    1396
  UDP    192.168.56.101:137    *:*                                    4
  UDP    192.168.56.101:138    *:*                                    4
  UDP    192.168.56.101:1900    *:*                                    1524

C:\Documents and Settings\Navya mdas>
<<

cd1zz

User avatar

Recruiters
Recruiters

Posts: 566

Joined: Sun Oct 03, 2010 9:01 pm

Post Fri Jun 15, 2012 10:21 am

Re: Ms Sql Server Connection Refused

Your problem is here:
TCP    127.0.0.1:1433        0.0.0.0:0              LISTENING      2516

If you're trying to access this box remotely, it wont work bound to 127.0.0.1

You need to bind sql to 0.0.0.0 or your actual IP.
<<

skorpinok

Newbie
Newbie

Posts: 36

Joined: Thu Jun 14, 2012 9:48 am

Post Fri Jun 15, 2012 10:55 am

Re: Ms Sql Server Connection Refused

cd1zz wrote:Your problem is here:
TCP    127.0.0.1:1433         0.0.0.0:0              LISTENING       2516

If you're trying to access this box remotely, it wont work bound to 127.0.0.1

You need to bind sql to 0.0.0.0 or your actual IP.


How do i bind it sir ? suggest any info..or link might be helpful, however in sql server configuration manager /TCP/IP Properties. i have the following settings( could not attach the image due to size limit sorry) is there anything i should change?

under ip tab

IP1

Active                                      -yes
enabled                                    -yes
ip address                                -192.168.56.101
tcp dyanamic ports
tcp port                                    -1433

IP2

Active                                        -yes
enabled                                    -yes
ip address                                  -127.0.0.1
tcp dyanamic ports
tcp port                                      -1433

IP3
Active                                        -yes
enabled                                      -yes
ip address                                  -10.0.2.15
tcp dynamic ports
tcp port                                        -1433
<<

cd1zz

User avatar

Recruiters
Recruiters

Posts: 566

Joined: Sun Oct 03, 2010 9:01 pm

Post Fri Jun 15, 2012 11:05 am

Re: Ms Sql Server Connection Refused

If you want it to be accessible from any IP, i would remove all those entries and replace it with 0.0.0.0 then restart the service.
<<

skorpinok

Newbie
Newbie

Posts: 36

Joined: Thu Jun 14, 2012 9:48 am

Post Sat Jun 16, 2012 12:26 am

Re: Ms Sql Server Connection Refused

cd1zz wrote:If you want it to be accessible from any IP, i would remove all those entries and replace it with 0.0.0.0 then restart the service.


Thank you..very much sir for your kind advice.as u said i removed the entries & replaced with 0.0.0.0 for IP 2 & IP 3. it worked 100%..

Regards
skorpinok.

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 2 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software