Sql Injection
Automatic Detection and Exploitation of SQL Injection Flaws
Selasa, 3 Mei 2011
Safe3 SQL Injector is one of the most powerful penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of back-end database servers.
Features :
* Full support for GET/Post/Cookie Injection * Full support for HTTP Basic, Digest, NTLM and Certificate authentications * Full support for MySQL, Oracle, PostgreSQL, MSSQL, ACESS, DB2, Sybase & Sqlite * Full support for Error/Union/Blind/Force SQL injection * Sup...
SQL Injection through Automation with Tools and Search Engines
Senin, 25 April 2011
SQL Injection through Automation with Tools
Tools
are mainly used for automating two tasks within the SQL injection
attack process: construction of a working exploit and extracting
information. Having automated tools at hand not only dramatically
increase the efficiency of an experienced hacker but also extends the
potential attacker population. Software tools equipped with a crisp and
appealing GUI, allow inexperienced “script kiddies” to moun...
Preventing SQL Injection with SecureSphere Application Data Security Solutions
Jum`at, 22 April 2011
The
Imperva SecureSphere Web application firewall features advanced
protection against SQL injection attacks and incorporates a multi-layer
security model that enables precise attack protection from SQL
injection without the need for manual tuning. SecureSphere's security
architecture incorporates both dynamic positive (white list) and
dynamic negative (black list) security models. Robust enforcement
algorithms draw on both security models to identify and block even th...
Perlindungan terhadap SQL Injection dengan SecureSphere Application
Jum`at, 22 April 2011
SecureSphere menggunakan pendekatan multi-berjenjang untuk mendeteksi injeksi SQL, validasi HTTP protokol, berdasarkan parameter IPS, Dinamis Profil, dan Korelasi Validasi Attack. Imperva telah mengembangkan perlindungan khusus terhadap injeksi SQL melalui peringatan khusus SQL Injection yang merupakan bagian dari mesin keamanan SecureSphere. Dengan menggabungkan indikasi (tipe karakter / panjang pelanggaran, karakter khusus, dll) dengan mekanisme anti-penghindaran, pencocok...
Step by Step to Deface Site with SQL Injection
Senin, 18 April 2011
What is SQL injection ?
SQL stands for Structured Query Language. It is very high level language,I mean close to humans. Like SELECT,INSERT,DELETE,UPDATE queries are used to select,add data,delete data,update data respectively.SQL is used to design the databses. The information is stored in databses. SQL injection is the vulnerability occuring in database layer of application which allow attacker to see the contents stored in database. This vulnerabilty occures when the use...