osql.exe

Question

hi frindes .
i read a article about sql injection and hack.this article telled offen servers that we use for our website,that servers have sa user that maybe have null password.and hackers can attcke to your database with osql.exe command. i check 3 servers that i have database on it and there is sa user in security| login part that i can't change password or delete it.
my question how hackers use sa user ,and how can i change password of it?

Answer 1

Yeah, .NET Framework is too big (23698 KB) to download. But I think ordinary users are not usually those that will use .NET applications first. Not any new technology will come popular in common people very soon. I think .NET will find it's way first to corporate users. Windows 2003 Server already has .NET. How many did obtain Java virtual machine when it came available and was not part of Windows installation? ;)

Answer 2

Al though i know that .Net produce small files . But now .Net is not popular in common people other then programmers. So if they want to run such files they have to download .Net FrameWork which is of about 25 to 30 mb and people with dial up cannt do that. So most of the people can not use .Net files for at least 2 years as it will take time to switch to .Net 2003(windows) so there they dont have to download the framework. that is all. thanks for reply.

Answer 3

There's no such tool. You always need CLR to run managed code. Faster and smaller file size? Idon't think .NET files are very big... and JIT compiling can produce a lot faster code than this kind of "compile for all" technique.

Answer 4

None that I've ever heard of... and I'm not even sure its possible due to the architecture of the framework... since everything runs on top of it, including the Garbage Collector, and all the base classes, you would have to compile a hell of a lot into your .exe file to get all the functionality in it.