How to check which type of database a website uses
Back when the internet was in the pre-hype phase there use to be an online tool where when you type in the URL, it will return information on the web-site's OS, database etc
OS, yes. Database, no. Same tool as always.
Brad Wilson (dotnetguy.techieswithcats.com)
This is not simple, but sometimes can be done. "Web Hacking" discusses how to check the database engine. The key is to malform URLs or screw up parameters in a way that the database will generate an error which will be sent back to the user.
Or exploit strings sent directly to the SQL engine; such as the case with username- and password fields. This can be done by inserting a comment character and building your own query.
hmmm ... if a string passed via url is automatically executed, there could be all kinds of mischeif to do
The smart developer escapes any string data to prevent miscreants from doing badness to the database.
One thing you could do is if you assume the db server is on the same IP, try portscanning and see if you can find any db servers running.......
" if a string passed via url is automatically executed, there could be all kinds of mischeif to do "
silly question, but why??
Fog Creek Home