You are here: hacking technology > network management > Content
Hot Articles
Recommend Articles
New Articles
Server MSSQL security Settings scheme
  Add date: 12/30/2010   Publishing date: 12/30/2010   Hits: 17
Total 2 pages, Current page:1, Jump to page:
 

Once met, almost mad, have installed MSSQL friend, hurriedly try, delete the following components. Of course, the premise is you want to put his own database fix to go after deletion, otherwise components after deletion many function cannot be used, for safety, have to sacrifice some function, of course, like me this kind of, I in addition to the introduction, basic MSSQL after previous using less than twice, so, I is will not hesitate to delete, hey.

 

A, there will be a safety problems of SQL delete. Comprehensive process. Everything for the sake of safety!

 

Delete calls the shells, the registry, COM components of destruction permissions

 

MS SQL SERVER2000

Use system account access parsers

Run the following script

Use master

Exec sp_dropextendedproc 'xp_cmdshell'

Exec sp_dropextendedproc 'xp_enumgroups'

Exec sp_dropextendedproc 'xp_loginconfig'

Exec sp_dropextendedproc 'xp_enumerrorlogs'

Exec sp_dropextendedproc 'xp_getfiledetails'

Exec sp_dropextendedproc 'Sp_OACreate'

Exec sp_dropextendedproc 'Sp_OADestroy'

Exec sp_dropextendedproc 'Sp_OAGetErrorInfo'

Exec sp_dropextendedproc 'Sp_OAGetProperty'

Exec sp_dropextendedproc 'Sp_OAMethod'

Exec sp_dropextendedproc 'Sp_OASetProperty'

Exec sp_dropextendedproc 'Sp_OAStop'

Exec sp_dropextendedproc 'xp_regaddmultistring'

Exec sp_dropextendedproc 'xp_regdeletekey'

Exec sp_dropextendedproc 'xp_regdeletevalue'

Exec sp_dropextendedproc 'xp_regenumvalues'

Exec sp_dropextendedproc 'xp_regremovemultistring'

Exec sp_dropextendedproc 'xp_regwrite'

Drop sp_makewebtask procedure

go

Delete all dangerous expansion.

Sp_dropextendedproc 'xp_cmdshell' exec [delete this expanded and will not be able to connect remotely database]

The following three storage process will be in SQL SERVER restore backup when being used, non-essential do not delete

Sp_dropextendedproc 'xp_dirtree' # exec [delete this expansion, will not new or additional database]

Sp_dropextendedproc 'Xp_regread' # exec [delete this expanded, restore database auxiliary]

Sp_dropextendedproc 'xp_fixeddrives' # exec [delete this expansion, will not be able to restore database]

 

Restore script

Use master

Xp_cmdshell, sp_addextendedproc EXEC dllname = '@ xplog70 DLL'.

Xp_enumgroups, sp_addextendedproc EXEC dllname = '@ xplog70 DLL'.

Xp_loginconfig, sp_addextendedproc EXEC dllname = '@ xplog70 DLL'.

Xp_enumerrorlogs, sp_addextendedproc EXEC dllname = '@ xpstar DLL'.

Xp_getfiledetails, sp_addextendedproc EXEC dllname = '@ xpstar DLL'.

Sp_OACreate, sp_addextendedproc EXEC dllname = '@ odsole70 DLL'.

Sp_OADestroy, sp_addextendedproc EXEC dllname = '@ odsole70 DLL'.

Sp_OAGetErrorInfo, sp_addextendedproc EXEC dllname = '@ odsole70 DLL'.

Sp_OAGetProperty, sp_addextendedproc EXEC dllname = '@ odsole70 DLL'.

Sp_OAMethod, sp_addextendedproc EXEC dllname = '@ odsole70 DLL'.

Sp_OASetProperty, sp_addextendedproc EXEC dllname = '@ odsole70 DLL'.

Sp_OAStop, sp_addextendedproc EXEC dllname = '@ odsole70 DLL'.

Xp_regaddmultistring, sp_addextendedproc EXEC dllname = '@ xpstar DLL'.

 

Other pages: : 1 * 2 * Next>>
Prev:How to have their own safety website Next:Hackers don't want you to know that safety skills

Comment:

Category: Home > network management