[vercenta]

MSSQL | Attack Script | Scanner | Filter | Lists |
FREE

Introduction
Hi, I am releasing my MSSQL scripts to everyone for free, I am unsure of the payload of the public MSSQL script out there or if it works the same but I in no way stole anything from it as I have never even used that script before.
That being said, I wouldn't trust it either especially it being leaked.

So after seeing threads about people selling MSSQL for $200-$500 I decided to look up the protocol, turns out this exploit has been around since 2003 just seems to have been forgotten. I found the payload in about 10 minutes just browsing through pages... No packet sniffing required.

The payload is only 1 byte long:

Code

x02

And it can receive a response up to 1300 bytes... Yup thats a 1300x AMP if you are lucky enough to find these servers.
There is not many of them so the odds of achieving that globally with a large list is pretty much impossible, most servers respond about 250 bytes.
So its roughly a 250x amplification method.

About The Scripts
I have included my Attack Script [C], Scanner [C] and Filter [PHP]
I have also thrown in some filtered and unfiltered lists.
There are really not many MSSQL servers in the world, they are about as rare as CHARGEN so you will need to scan for a long time, this list I provided should last a while though.

Don't forget to give permissions to binary files.

Code

chmod 777 mssql
chmod 777 mssqlscan

Attack Script Usage

Code

Usage: ./mssql [IP] [Port] [List] [Threads] [Time]

Scanner Usage

Code

Usage: ./mssqlscan [Start Range] [End Range] [List] [Threads] [Scan Delay]

Filter Usage

Code

Usage: php filter.php [Input.txt] [Output.txt] [Response Size]

-For educational purposes only!

Credits to LightSpeed for the original C scripts, I modified them for MSSQL payload.

Download Here

[nbc_]

First post does this make me special? Will you love me now?

[R҉eece҉]

Not a 1300x amp.
This script is 10x amp. Ask anyone with common knowledge.
Hopefully they're not backdoored. Thanks though

It will amplify any attack 10x. 100Mbps to 1Gbps.
Yes it will amp that byte to 1300x IF you get 1300bytes. Thats why we dont say its a 1300x amp.
We put it all together. 10x amp.

Technically you're right with the 1 byte thing but thats just going to confuse people.

[vercenta]

Not a 1300x amp.
This script is 10x amp. Ask anyone with common knowledge.
Hopefully they're not backdoored. Thanks though

It will amplify any attack 10x. 100Mbps to 1Gbps.

Actually If a packet is 1 byte and a response is 1300 bytes that makes it 1300x larger then the original request, being 1300x amplification for that particular server✌

[R҉eece҉]

Actually If a packet is 1 byte and a response is 1300 bytes that makes it 1300x larger then the original request, being 1300x amplification for that particular server✌

Yes that is correct for that one byte. BUT overall its a 10x amp.
It will not amplify a 100Mbps server 1300 times.

[vercenta]

First post does this make me special? Will you love me now?

I've sent you the scripts enjoy🤝

---

Yes that is correct for that one byte. BUT overall its a 10x amp.
It will not amplify a 100Mbps server 1300 times.

I never said it would lol

🤝

[R҉eece҉]

I've sent you the scripts enjoy🤝

---

I never said it would lol

🤝

Then call it a damn 10x amplification otherwise people will think you will get 130Gbps out of a 100Mbps server.

[ablationvector]

If you can hook me up with this new fanceh scriptz i would luv u with all my vagina
<3

[nbc_]

Vouch for Ancient's scripts, works properly, etc etc etc.

[Phenomite]

Nice release but Post to PM is against forum rules.

Change this please.

[vercenta]

Nice release but Post to PM is against forum rules.

Change this please.

Did not know that, I put the download link in the thread now🎉

[R҉eece҉]

Will you be giving out the .c version of the attack script?

[Taranis]

You are mistaken in some of your assumptions, I have a list of millions and it works very well .

And ... 1300x amp ? Lol Hilarious ...

Furthermore, this is not the same payload of my script at all .

I will test it though and update soon about it

[vercenta]

You are mistaken in some of your assumptions, I have a list of millions and it works very well .

And ... 1300x amp ? Lol Hilarious ...

Furthermore, this is not the same payload of my script at all .

I will test it though and update soon about it

1) Go into calculator
2) Divide 13,000 by 1
3) Answer is 1300x

Hope I helped✌

By the way, if you use a different payload that makes it less amplification because my payload is only 1 byte :)

[Taranis]

1) Go into calculator
2) Divide 13,000 by 1
3) Answer is 1300x

Hope I helped✌

As other ppl already stated, you show you totally lack understanding of how amplification works.

Furthermore, this script is not even using the right payload that will match both my script and Horny method.

Go research again and come up with a new one plz :) You got it totally wrong sorry to tell you

Lmk when it s working

Btw, the method isn t really about the amp factor ...