Scuba

Scuba by Imperva is a free, lightweight Java utility that scans Oracle, DB2, MS-SQL, and Sybase databases for known vulnerabilities and configuration flaws. Based on its assessment results, Scuba creates clear, informative reports with detailed test descriptions. Summary reports, available in Java and HTML format, illustrate overall risk level. With Scuba by Imperva, you are quickly on your way to meeting industry-leading best practices for database configuration and management.

Scuba supports the following databases:

• Oracle*
• IBM DB2*
• Microsoft SQL Server*
• Sybase*

* All database operating systems are supported.

Installation pre-requisites:

• Windows 98/NT/2000/XP
• Sun Java JRE 1.4+

It is available from here.

Execution:

Insert the IP address, Port, Instance and appropriate credentials:

The following report is produced: