DEFCON 17: Advanced SQL Injection

Speaker: Joseph McCray Founder of Learn Security Online

SQL Injection is a vulnerability that is often missed by web application security scanners, and it's a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited.

Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations when you must prove to the customer the extent of compromise that is possible.

The key areas are:

•IDS Evasion, Web Application Firewall Bypass
•Privilege Escalation
•Re-Enabling stored procedures
•Obtaining an interactive command-shell
•Data Exfiltration via DNS

For more information visit: http://bit.ly/defcon17_information

To download the video visit: http://bit.ly/defcon17_videos

Category:

Science & Technology

Tags:

• exploited
• security

[j0emccray]

@Wolver1nEmkd - so what exactly would be more advanced? I covered Error, Union, Blind, exfil via DNS, dealing with errors, and IDS/WAF evasion. What would be better - stacked queries, magic quotes, UDF, what? PS..Dumbfuck??? really???? - I speak at conferences all over the world. I'd love to see you come to me and call me dumbfuck to my face.

[FlentMan]

Thumbs up for all his years of experience and everything he put into it

[guruleinii]

this guy is fucking cool

[VerifyVolatile]

@j0emccray lmao, we all love you bro.

And you're not here to clean ;D

[tyulik]

This guy Joe is so awesome! i've leanred so much!

[Gridlock73]

Hats off to Joseph, really enjoyed your presentation. Thanks

[FragTheLag]

@j0emccray Something new maybe; i've had 4 lines of code in a common header file for years that owns every thing you have described. In your defence you really did nail it the coding needs to be stupidly flawed.

The mention of param injection also makes no sense i mean i would seriously need to dynamicly run over _GET or _POST and just assume everything was valid and import them into my namespace.

Meh learned nothing.

[Microblitz]

@j0emccray You wouldn't want to get in trouble for beating up a twelve year old with a mental capacity of a sink plunger would you Wolve?

[SHARED745]

great guy for great tuto, good job

[VerifyVolatile]

"Well now pentesting is different... You can't even walk in a barnes&noble without tripping over a security book"

I found this funny, since there's an XSS vulnerability on barnes&noble's website. lol

[Cacawate]

@Wolver1nEmkd he taught you Advanced sick burn lol