News

Sql Injection

Automatic Detection and Exploitation of SQL Injection Flaws

Selasa, 3 Mei 2011
Safe3 SQL Injector is one of the most powerful penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of back-end database servers.   Features : * Full support for GET/Post/Cookie Injection * Full support for HTTP Basic, Digest, NTLM and Certificate authentications * Full support for MySQL, Oracle, PostgreSQL, MSSQL, ACESS, DB2, Sybase & Sqlite * Full support for Error/Union/Blind/Force SQL injection * Sup...

SQL Injection through Automation with Tools and Search Engines

Senin, 25 April 2011
SQL Injection through Automation with Tools     Tools are mainly used for automating two tasks within the SQL injection attack process: construction of a working exploit and extracting information. Having automated tools at hand not only dramatically increase the efficiency of an experienced hacker but also extends the potential attacker population. Software tools equipped with a crisp and appealing GUI, allow inexperienced “script kiddies” to moun...

Preventing SQL Injection with SecureSphere Application Data Security Solutions

Jum`at, 22 April 2011
The Imperva SecureSphere Web application firewall features advanced protection against SQL injection attacks and incorporates a multi-layer security model that enables precise attack protection from SQL injection without the need for manual tuning. SecureSphere's security architecture incorporates both dynamic positive (white list) and dynamic negative (black list) security models. Robust enforcement algorithms draw on both security models to identify and block even th...

Perlindungan terhadap SQL Injection dengan SecureSphere Application

Jum`at, 22 April 2011
SecureSphere menggunakan pendekatan multi-berjenjang untuk mendeteksi injeksi SQL, validasi HTTP protokol, berdasarkan parameter IPS, Dinamis Profil, dan Korelasi Validasi Attack. Imperva telah mengembangkan perlindungan khusus terhadap injeksi SQL melalui peringatan khusus SQL Injection yang merupakan bagian dari mesin keamanan SecureSphere. Dengan menggabungkan indikasi (tipe karakter / panjang pelanggaran, karakter khusus, dll) dengan mekanisme anti-penghindaran, pencocok...

Step by Step to Deface Site with SQL Injection

Senin, 18 April 2011
What is SQL injection ? SQL stands for Structured Query Language. It is very high level language,I mean close to humans. Like SELECT,INSERT,DELETE,UPDATE queries are used to select,add data,delete data,update data respectively.SQL is used to design the databses. The information is stored in databses. SQL injection is the vulnerability occuring in database layer of application which allow attacker to see the contents stored in database. This vulnerabilty occures when the use...