Special Ops Security Releases Sqlrecon V1.0 Free Database Scanning Tool

Chip Andrews of SQL Server Security fame and now a founder of Special Ops Security, has completed work on the successor to SQLPing2 which aggregates multiple SQL Server discovery methods into a single, easy-to-use tool.

---

URL: http://SpecialOpsSecurity.com/news/2005/05/  •  PR NEWSWIRE

ALPHARETTA, Georgia (PR NEWSWIRE)--March 21, 2005--Chip Andrews, one of the founders of Special Ops Security, released his much-anticipated successor to SQLPing2, a staple of any professional's toolbox for SQL Server discovery and assessment. In addition to adding a number of new discovery methods (8 different techniques in all) and enhancing performance, the successor product has been renamed to SQLRecon to keep with the theme of tactical and strategic security solutions offered by Special Ops Security. SQLRecon v1.0 is built upon the Microsoft .NET development platform and is available for immediate download from our research labs at http://SpecialOpsSecurity.com/labs/sqlrecon/.

SQLrecon is a discovery tool that performs both active and passive scans of your network in order to identify all of the Microsoft SQL Server and Microsoft SQL Server Desktop Edition (MSDE) installations in your enterprise. Due to the proliferation of personal firewalls, inconsistent network library configurations, and multiple-instance support, SQL Server installations are becoming increasingly difficult to discover, assess, and maintain. Many of the infections in the SQL Slammer worm of 2003 were against MSDE installations on end-user and developer systems, outside the control or awareness of the IT and Security teams.

"SQLrecon is designed to help remedy this problem by combining all known means of SQL Server/MSDE discovery into a single tool which can be used to locate and determine the patch levels of servers you never knew existed on your network so you can properly secure them," said Andrews.

"SQLrecon is an assessment tool that is just part of a larger strategy to secure your database servers," stated Erik Pace Birkholz, president for Special Ops Security. "When combined with full-blown database vulnerability scanning tools like NGS Software's SQuirreL for SQL, an organization or security consultant can wage war against database security negligence and avoid information theft headlines, as seen recently in the news." SQuirreL for SQL, from UK-based researchers NGS Software, can be purchased exclusively in the US through Special Ops Security.