1. Home
  2. Networking
  3. Network security assessment

Chapter 8. Assessing FTP and Database Services

This chapter focuses on the remote assessment of FTP and SQL database services used in most corporate networks to facilitate file distribution and central storage of data. If these services aren't configured or protected correctly at both application and network levels, they can be used to great effect to compromise networks and sensitive data.



    		Network Security Assessment
    		Foreword
    		Preface
    		Chapter 1. Network Security Assessment
    		Chapter 2. The Tools Required
    		Chapter 3. Internet Host and Network Enumeration
    		Chapter 4. IP Network Scanning
    		Chapter 5. Assessing Remote Information Services
    		Chapter 6. Assessing Web Services
    		Chapter 7. Assessing Remote Maintenance Services
    		Chapter 8. Assessing FTP and Database Services
    		8.1 FTP
    		8.2 FTP Banner Grabbing and Enumeration
    		8.3 FTP Brute-Force Password Guessing
    		8.4 FTP Bounce Attacks
    		8.5 Circumventing Stateful Filters Using FTP
    		8.6 FTP Process Manipulation Attacks
    		8.7 FTP Services Countermeasures
    		8.8 Database Services
    		8.9 Microsoft SQL Server
    		8.10 Oracle
    		8.11 MySQL
    		8.12 Database Services Countermeasures
    		Chapter 9. Assessing Windows Networking Services
    		Chapter 10. Assessing Email Services
    		Chapter 11. Assessing IP VPN Services
    		Chapter 12. Assessing Unix RPC Services
    		Chapter 13. Application-Level Risks
    		Chapter 14. Example Assessment Methodology
    		Appendix A. TCP, UDP Ports, and ICMP Message Types
    		Appendix B. Sources of Vulnerability Information
    		Colophon