Can I read Advanced SQL injection to operating system full control on EtoBox?

Advanced SQL injection to operating system full control by Bernardo Damele Assumpcao Guimaraes is a nonfiction available to read on EtoBox.

What is Advanced SQL injection to operating system full control about?

This white paper discusses the security exposures of a server that occur due to a SQL injection flaw in a web application that communicate with a database. Over ten years have passed since a famous hacker coined the term "SQL-injection" and it is still considered one of the major application threats. A lot has been said on this vulnerability, but not all of the aspects andimplications have been uncovered, yet.This paper aim is to collate some of the existing knowledge, introduce new techniques and demonstrate how to get complete control over the database management system's underlying operating system, file system and internal network through a SQL injection vulnerability in over-looked and theoretically not exploitable scenarios.

Who reads Advanced SQL injection to operating system full control?

Author

Bernardo Damele Assumpcao Guimaraes

Published

2009

Language

EN

Category

nonfiction

Subjects

Computer Science, Internet & World Wide Web, Stem