Blind SQL Injections

This output taken from a real private Blind SQL Injection tool while exploiting SQL Server back ended application and enumerating table names. This requests done for first char of the first table name. SQL queries a bit more complex …
unicode securityunicode …
Read the original post: Blind SQL Injections
about me blind blind sql injections […]

SQL Injection Cheat Sheet 2

SQL Server (S) Use field COLLATE SQL_Latin1_General_Cp1254_CS_AS or some other valid one - check out SQL Server documentation. SELECT header FROM news UNION ALL SELECT name COLLATE SQL_Latin1_General_Cp1254_CS_AS FROM members; MySQL (M) …
unicode securityunicode security
Go here to read the rest: SQL Injection Cheat Sheet 2
about me cheat sheet computer networks every thing […]

Log Buffer #73: a Carnival of the Vanities for DBAs

Alexander Kornbrust of red database security reviews the ebook Practical Oracle Security and lists some potential problems and inaccuracies he found in the book. Yasin Baskan of Oracle Today, while upgrading to 10g, discovers that bind …
exploit mp3 port port 1025 port 1029 exploit sandisk sansa m240 tcp […]

Daily Del.icio.us for Sep 19, 2005

Linux.com | Securing MySQL » Securing MySQL at Linux.com; MySQL Gotchas » MySQL Gotchas via WebLog Tools Collection.
database hack job php protect your php queries from sql securitydatabase, hack, job, php, protect your php, queries from sql, security
Read more here: Daily Del.icio.us for Sep 19, 2005
10 7 2007 […]