Introduction

Web applications must store different types of information. Depending on the case, there could be millions of records needed to be stored somewhere and that is where databases come in. Database servers are crucial since they provide a convenient way of managing information, and programming APIs are available for almost any language and database type.

Nmap NSE has added support for numerous database servers. System administrators will find it handy that with the help of Nmap we can automate several tasks when dealing with a bunch of database servers, such as running a query to informs us about the status. On the other hand, securing a database server must be done carefully and is as important as securing the web server. Nmap also helps us with this by supporting automated actions such as checking for empty root passwords and insecure configuration.

This chapter covers different NSE scripts for the most common relational databases such as MySQL, MS SQL, and Oracle and nosql databases...