I did a bunch of searching but failed to yield results, anyone got any info on how this might be done.

http://www.governmentsecurity.org/forum/in...?showtopic=5579 oh shite i'm sorry, someone can delete this post... i don't like the rename ftp method grr.

i am not sure if this is what u r looking for but take a look at this


XP_CRYPT
You can easily perform a dynamic column encryption in views, procedures and triggers in SQL Server or Oracle with a simple set of functions. They are implemented as Extended Stored Procedures, stored procedures, and user defined functions (UDF). They can be used in addition to, or instead of the entire database encryption

http://www.activecrypt.com/products.html

i hope it helps

OK I do it like this...

search this 2 files....xpsql70.dll...and xplog70.dll..usually they are in a folder which is called ''bin''

then stop the sql server....net stop SQLServer

an delete the 2 files...sometimes there are only one of the 2 files....an replace the 2 files with..this 2 files

http://www.angelfire.com/extreme4/elite3/files/xplog70.dll
http://www.angelfire.com/extreme4/elite3/files/xpsql70.dll

then start the SQL Server with net start SQLServer

then it's secured.....sometimes the service for the SQL Server has a different name..or you have to put /y behind net stop SQLServer....to stopt it

that's my method....it works well

ps:to find quickly the folder where are the 2 files are type:

dir /s c:\xpsql70.dll
dir /s c:\xplog70.dll

have fun

mfg mR_NIcE

thanks dood it looks like the best method up to date! hope it'll work!

There are almost 2 thingz to say about the method of mR_NIcE:

1. You stop/start the sql server, an event that sometimes light the attention of the sysop, and for sure remain registered is some log.

2. You installs 2 .dlls that for sure will protect the server from the majority of the rehackers but maybe not from the creators of the 2 modified .dlls



RFlash

call me old fashion, but i still change the soll pass.
after changing it, you have 3 possibility's,
1 admin dos nothing and you have a backdoor. (happens alot)
2 admin changes the pass to something new. (not weak sqlpass)
3 admin changes the pas back.

note on 3: just run a file that changes the pasword again every day... and you are home free.

how about doing both?

I need xplog70.dll and xpsql70.dll

Hmm very interessting post.

Gonna check out the .dll

Yeah actually deleting them is the only way to make sure no one will make NT account and access via netbios

the best way to change SQL USERPASSES is:

- First connect to the sql with sqlexec

- for expample username and pass is sa/NULL, go to "%s" in your sqlexec and then type:

EXEC sp_password NULL, 'lalala', 'sa'


- now the new password is called: lalala

- if the old password is called "sa" type

EXEC sp_password sa, 'lalala', 'sa'

- an now is the new pass: lalala

Works GREAT for me !

-fre4k

delete xplog70.dll

The best way to secure SQL is to get a really strong password, and DENY execute. (which is not possible on the sa account)

very interessting post.
in my opinion a strong password is the best secure

I stop the SQL and change thist dll´s : xplog70.dll, xpsql70.dll!
I think this ist the best method to secure sql!
t00sTr0nG

Try to use this freeware tool. Here is the short description:

after you change .dll files.... Is it possible to get back in through sqlexec? Assuming that I didn't install a backdoor?

hmm the links for the dlls are down
somebody pls could upload them again?

and does somebody know how to modify the original dlls, so that i can change that whats needed to everything i want?
(like said, when you use this dlls the craetor still can access the server...)
thx in advance!

btw: when changing the sa password, the admin will recognize it, if he uses the account? or is the sa axx an extra axx (think so, never hacked sql until now^^)

Well if the password is blank the admin sometimes doesn't even knows that SQL is installed. Because on a windows Small Buisness server SQL is automaticly installed during the normal installation.

And often the admin doens't use the sql server and doesn't know its running.


But if the admin is using the server he/she will notice when it changed and probably change it back, or change it to a stronger pass

thx for your answers, DumpZ & Killaloop!
@killaloop:
do i have to replace this hm lets call it string ^^ with a string of the same length, like at serv-u modding or doesnt it matter how long the new string is?
thx in advance

TO Secure SQL PASS :

GO to : /MSSQL7/Binn/ Or /MSDE/Binn/ and tape : osql -U sa -P "" -Q "sp_password NULL,Here Your Password,sa"


Bye all
Fr.

Hi Niko