SQLScan

SQLScan is a tiny piece of software designed to help administrators find potential vulnerabilities in the SQL servers they are managing. More precisely, the tool is tailored to detect Slammer and SQHell worms, both known to target less maintained Microsoft SQL 2000 servers.

Functionality-wise, the application is as simple to use as it looks, meaning that you can get started by entering a list of IP addresses to be scanned in the IP list. You can continually add to the list and can pull in a pre-built list of IP addresses from a file if you wish. IP addresses in the file can be specified as single IPs (10.1.2.3), or ranges (10.1.2.3-10.3.4.5, or 10.1.2.3-254 etc.).

Take note that you can choose which SQL port you would like to scan by entering it in the port selection edit box. Port 1434 is used by default but this can be changed to anything more appropriate for the network you are scanning. Once you hit the Start button, the program will attempt to extract and display the SQL query response string from responding hosts.

When the scan has completed you can save the list of discovered hosts to a file by clicking the "Save..." button at the bottom right of the window. You can save in either HTML or comma-separated (CSV) format by choosing an appropriate file extension. The file will be saved in the same manner as it is displayed i.e. if you have chosen to sort the list by clicking one of the column headers that is how it will appear in the file.