rapid7/metasploit-framework — pull request #28 by nullbind (2011-11-20 23:18:18+00:00)
Title: New auxiliary module - SQL Server - Find, sample, and write data to a CSV file

# Use Case:
# This script will search through all of the non-default
# databases on the SQL Server for columns that match the
# keywords defined in the TSQL KEYWORDS option. If column
# names are found that match the defined keywords and
# data is present in the associated tables, the script
# will select a sample of the records from each
# of the affected tables. The sample size is determined
# by the SAMPLESIZE option. Also, the results can be written to a
# CSV file if the OUTPUT is set to "yes" and an OUTPUTPATH option is set.
#
# This script is valuable for gathering evidence during PCI
# penetration tests and could even be used during the PCI
# data dicovery process.