rapid7/metasploit-framework — pull request #51 by nullbind (2011-12-12 04:36:22+00:00)
Title: SQL Server - Find, Sample, and Log Sensitive Data - Now loot enabled :)

Hopefully the loot updates are sufficient, but let me know if
you have any questions or comments.

Module Description
This script is valuable for gathering evidence during
penetration tests and can also be used during the PCI
data dicovery process.

This script will search through all of the non-default
databases on the SQL Server for columns that match the
keywords defined in the KEYWORDS option. If column
names are found that match the defined keywords and
data is present in the associated tables, the script
will then select a sample of records from each
of the affected tables. The sample size is determined
by the SAMPLESIZE option, and query results output in
a CSV format.