8.8 Database Services

Three popular SQL database services that are often found in small, medium, and large network environments are Microsoft SQL Server, Oracle, and MySQL, accessible through the following network ports:

ms-sql          1433/tcp

ms-sql-ssrs     1434/udp

ms-sql-hidden   2433/tcp

oracle-tns      1521/tcp

oracle-tns-alt  1526/tcp

oracle-tns-alt  1541/tcp

mysql           3306/tcp

In this half of the chapter, I discuss the remote enumeration, brute-force password-grinding, and process-manipulation attacks you can launch to gain access to these database services.