Bachelor Work: Attacking Database Servers

[-=Renegade=-]

Hey guys!

I have to do some bachelor work at university and I thought about writing about "Attacking Database Servers".

I mainly want to focus on Network Discovery, Common and Specified Attack Scenarios and Protection Mechanism.

I do NOT want to focus on SQL Injection (I might add a little chapter on effects but not on how to SQL Inject an application), I really want to write about attacking the database servers as itself, not via an application.

I would be glad about every literature or input you know oh this topic, mainly about Oracle, MSSQL and MySQL.

I thought about The Database Hacker's Handbook: Defending Database Servers as main literature but everything else would be really appreciated since I need a lot of different literature.

Thanks in advance

-=R=-

[-=Renegade=-]

No ideas on this one?

[williamc]

I put together a tutorial awhile ago. Check it out here:
http://forums.remote-exploit.org/gen...loitation.html