Joe McCray - Advanced SQL Injection - LayerOne 2009

SQL Injection is a vulnerability that is often missed by web application security scanners, and its a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited.

Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations when you must prove to the customer the extent of compromise that is possible.

• Category

  Education

[noid23]

Ya, Joe is a terrific speaker. He manages to walk that line between being entertaining and being informative, and he does it very well.

[Joseph McCray]

Noid - thanks so much for letting me speak at LayerOne. I had a great time, and met some great people. I really hope that people enjoy this talk, and learn a few things from it. Hopefully people will like this and I'll be able to speak at LayerOne again in the future. It's a really well run conference with a ton of smart people.

For anyone that hasn't been to LayerOne - this is one hell of a CON. Don't miss next year!!!!

[Sit Solitary]

Awesome thanks heaps! you make it really amusing!

[xxdigipiratexx]

I rather enjoyed that. I have no clue what most of it was he was talking about, but as someone just learning about this area of research, a lot of what he said clicked for me, while I've been just whacking away at stuff trying to figure out on my own, what causes this error, and what makes this happen, etc. Nice to have answers why now.

[mmnp43]

very good talk !

[moonshiry]

Wow. i dont understand anything. guess i need some basic lessons first.

[Mike Lou]

post some of your talks we'd love to hear your words of wisdom...

[Johnny Dumv.]

45 min ? omg :|

[Sean Ó Briain]

Great video! Very indepth, and I like the way he presents his material. Does anyone have the slides by any chance?

[blacksiddis]

hes making it sound a lot harder than what it actually is.