A small multi-threaded tool that scans for Microsoft SQL Servers. The tool does its discovery by using UDP and returns a list of all detected instances with there respective protocols and ports.
It is available from here.
Installation:
Download
Unzip
Usage:
c:\>MSSQLScan -t <target_ip> [options]
Options:
-t <target> - target ip address(es)
-s <src> - source ip address
-T <threads> - maximum threads (default 50)
-v - verbose logging
-w <timeout> - timeout for replies (default 500 ms)
-o <file> - output to file
example:
MSSQLScan -t 192.168.1-2.* -o results.txt
Example Output:
Scan results
-
201.101.55.12;DATA5;INST1;8.00.194;[np:\\DATA5\pipe\sql\query, tcp:1433]