bugtraq - Re: how to exploit SQL INJECTION?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050621235921.GA5940@linux.unixwiz.net>
Date: Tue, 21 Jun 2005 16:59:21 -0700
From: Steve Friedl <steve@...xwiz.net>
To: Pablo Escobar <slackware77@...il.com>
Cc: pen-test@...urityfocus.com, nessus@...t.nessus.org,
	bugtraq@...urityfocus.com
Subject: Re: how to exploit SQL INJECTION?


On Wed, Jun 22, 2005 at 12:06:05AM +0300, Pablo Escobar wrote:
> Hello people, I made in my network website server with SQL with
> vulnerabilities to learn how to exploit it, I searched in google and i
> tried but dont work, the report of the nessus is:

Others have suggested good resources - I can't help but plug my own:

	SQL Injection Attacks by Example
	http://www.unixwiz.net/techtips/sql-injection.html

It's a great overview with what I'm told is an easy presentation.

Steve

--- 
Stephen J Friedl | Security Consultant |  UNIX Wizard  |   +1 714 544-6561
www.unixwiz.net  | Tustin, Calif. USA  | Microsoft MVP | steve@...xwiz.net