SQLPAT - MSSQL Password Audit Tool

This tool should be used to audit the strength of Microsoft SQL Server passwords offline. The tool can be used either in BruteForce mode or in Dictionary attack mode. The performance on a 1 Ghz pentium (256mb) is around 750,000 guesses/sec.

To be able to perform an audit one needs the password hashes that are stored in the sysxlogins table int the master database. The program needs to have them formated in a textfile accordingly.