Asegúr@IT IV - Remote File Downloading

•

4 recomendaciones•1,396 vistas

The document discusses blind SQL injection attacks, where an attacker can extract information from a database without seeing the results directly. It describes how an attacker analyzes differences in responses to determine true or false results. Various techniques are presented, including booleanization, tools for automating extraction, and downloading files by querying data loaded into temporary tables. Time-based techniques using delays are also covered. The document demonstrates attacks on Microsoft SQL Server, Oracle, and MySQL databases.

Tecnología

Chema Alonso Informática64 MS MVP Windows Security [email_address]

Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Code Injection Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object]

Blind Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Blind SQL Injection Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Blind SQL Injection Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Blind SQL Injection Attacks: Tools ,[object Object]

Time-Based Blind SQL Injection ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Time-Based Blind SQL Injection: Tools ,[object Object]

Marathon Tool ,[object Object],[object Object],[object Object],[object Object],[object Object]

BSQL Hacker & Deep Blind SQL Injection ,[object Object],[object Object],[object Object]

Accessing Files ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL Server 2K - External Data Sources ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL Server 2K – Bulk option ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL Server 2k5 - ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

MySQL ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Oracle ,[object Object],[object Object],[object Object],[object Object],[object Object]

Oracle – DBMS_LOB ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Questions? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Más contenido relacionado

La actualidad más candente

Advanced SQL injection to operating system full control (slides)Bernardo Damele A. G.

Sql killedserverColdFusionConference

Sql injection 幼幼班hugo lu

SQL injection: Not only AND 1=1Bernardo Damele A. G.

บทที่4Waritsara Sonchan

Insertไกรสรวัฒน์ ปัญโญ

บทที่ 4 การเพิ่มข้อมูลลงฐานข้อมูลPriew Chakrit

Real-time Inverted Search in the Cloud Using Lucene and Stormlucenerevolution

Selenium Webdriver with data driven frameworkDavid Rajah Selvaraj

Solr vs. Elasticsearch, Case by Case: Presented by Alexandre Rafalovitch, UNLucidworks

How to Use JSON in MySQL WrongKarwin Software Solutions LLC

Data Warehouse and Business Intelligence - Recipe 3Massimo Cenci

Recipe 14 of Data Warehouse and Business Intelligence - Build a Staging Area ...Massimo Cenci

Elasticsearch, a distributed search engine with real-time analyticsTiziano Fagni

Oracle to vb 6.0 connectivityrohit vishwakarma

SQLMAP Tool Usage - A Heads UpMindfire Solutions

Developing on SQL AzureIke Ellis

Lab manual asp.netVivek Kumar Sinha

Datacon LA - MySQL without the SQL - Oh my! Dave Stokes

La actualidad más candente (19)

Advanced SQL injection to operating system full control (slides)

Sql killedserver

Sql injection 幼幼班

SQL injection: Not only AND 1=1

บทที่4

Insert

บทที่ 4 การเพิ่มข้อมูลลงฐานข้อมูล

Real-time Inverted Search in the Cloud Using Lucene and Storm

Selenium Webdriver with data driven framework

Solr vs. Elasticsearch, Case by Case: Presented by Alexandre Rafalovitch, UN

How to Use JSON in MySQL Wrong

Data Warehouse and Business Intelligence - Recipe 3

Recipe 14 of Data Warehouse and Business Intelligence - Build a Staging Area ...

Elasticsearch, a distributed search engine with real-time analytics

Oracle to vb 6.0 connectivity

SQLMAP Tool Usage - A Heads Up

Developing on SQL Azure

Lab manual asp.net

Datacon LA - MySQL without the SQL - Oh my!

Destacado

Let's creating your own PHP (tejimaya version)Kousuke Ebihara

State of Web Security RailsConf 2016IMMUNIO

Bug Hunting SafariJanie Clayton

Exploiting Firefox ExtensionsRoberto Suggi Liverani

Cross Context Scripting attacks & exploitationRoberto Suggi Liverani

Reversing JavaScriptRoberto Suggi Liverani

Philip Hung Cao - Cloud security, the journey has begunSecurity Bootcamp

Bridging the gap - Security and Software TestingRoberto Suggi Liverani

Xml external entities [xxe]mattymcfatty

Nguyen Phuong Truong Anh - Some new vulnerabilities in modern web applicationSecurity Bootcamp

15 Years of Web Security: The Rebellious Teenage YearsJeremiah Grossman

Million Browser BotnetJeremiah Grossman

110864103 adventures-in-bug-huntingbob dobbs

Richard Johnson, high performance fuzzingPacSecJP

Pham Ngọc Bắc - An toàn thông tin dưới góc nhìn Quản lý theo tiêu chuẩn Quốc...Security Bootcamp

XML と PHP のイケナイ関係 (セキュリティ的な意味で) -Introduction of XXE attack and XML Bomb with...Kousuke Ebihara

Trần Anh Khoa - Kautilya và Powershelltrong kỹ thuật tấn công tiếp cậnSecurity Bootcamp

Owasp Top 10 A1: InjectionMichael Hendrickx

Augmented reality in your web proxyRoberto Suggi Liverani

Exploratory Testing As A QuestChrishoneybee

Destacado (20)

Let's creating your own PHP (tejimaya version)

State of Web Security RailsConf 2016

Bug Hunting Safari

Exploiting Firefox Extensions

Cross Context Scripting attacks & exploitation

Reversing JavaScript

Philip Hung Cao - Cloud security, the journey has begun

Bridging the gap - Security and Software Testing

Xml external entities [xxe]

Nguyen Phuong Truong Anh - Some new vulnerabilities in modern web application

15 Years of Web Security: The Rebellious Teenage Years

Million Browser Botnet

110864103 adventures-in-bug-hunting

Richard Johnson, high performance fuzzing

Pham Ngọc Bắc - An toàn thông tin dưới góc nhìn Quản lý theo tiêu chuẩn Quốc...

XML と PHP のイケナイ関係 (セキュリティ的な意味で) -Introduction of XXE attack and XML Bomb with...

Trần Anh Khoa - Kautilya và Powershelltrong kỹ thuật tấn công tiếp cận

Owasp Top 10 A1: Injection

Augmented reality in your web proxy

Exploratory Testing As A Quest

Similar a Asegúr@IT IV - Remote File Downloading

ShmooCON 2009 : Re-playing with (Blind) SQL InjectionChema Alonso

Time-Based Blind SQL Injection using Heavy QueriesChema Alonso

How "·$% developers defeat the web vulnerability scannersChema Alonso

Understanding and preventing sql injection attacksKevin Kline

Sql injectionNitish Kumar

Sql lite androidDushyant Nasit

Chapter 3.pptx Oracle SQL or local Android database setup SQL, SQL-Lite, codi...TAISEEREISA

Advanced Sql Injection ENGDmitry Evteev

SQL Server Security - Attack webhostingguy

SQL2SPARQLAlexandru Dron

Sql Injection Attacks(Part1 4)Hongyang Wang

SqlmapRushikesh Kulkarni

Chapter 14 sql injectionnewbie2019

03. sql and other injection module v17Eoin Keary

Python database accessSmt. Indira Gandhi College of Engineering, Navi Mumbai, Mumbai

Hackers Paradise SQL Injection Attacksamiable_indian

Sql injectionMehul Boghra

SQL InjectionAbhinav Nair

MySQL 8.0 New Features -- September 27th presentation for Open Source SummitDave Stokes

Sql injection manish fileyukta888

Similar a Asegúr@IT IV - Remote File Downloading (20)

ShmooCON 2009 : Re-playing with (Blind) SQL Injection

Time-Based Blind SQL Injection using Heavy Queries

How "·$% developers defeat the web vulnerability scanners

Understanding and preventing sql injection attacks

Sql injection

Sql lite android

Chapter 3.pptx Oracle SQL or local Android database setup SQL, SQL-Lite, codi...

Advanced Sql Injection ENG

SQL Server Security - Attack

SQL2SPARQL

Sql Injection Attacks(Part1 4)

Sqlmap

Chapter 14 sql injection

03. sql and other injection module v17

Python database access

Hackers Paradise SQL Injection Attacks

Sql injection

SQL Injection

MySQL 8.0 New Features -- September 27th presentation for Open Source Summit

Sql injection manish file

Más de Chema Alonso

CyberCamp 2015: Low Hanging FruitChema Alonso

Índice Pentesting con Kali 2.0Chema Alonso

Configurar y utilizar Latch en MagentoChema Alonso

Cazando Cibercriminales con: OSINT + Cloud Computing + Big DataChema Alonso

New Paradigms of Digital Identity: Authentication & Authorization as a Servic...Chema Alonso

CritoReto 4: Buscando una aguja en un pajarChema Alonso

Dorking & Pentesting with TacytChema Alonso

Pentesting con PowerShell: Libro de 0xWordChema Alonso

Foca API v0.1Chema Alonso

Recuperar dispositivos de sonido en Windows Vista y Windows 7Chema Alonso

It's a Kind of MagicChema Alonso

Ingenieros y hackersChema Alonso

Cuarta Edición del Curso Online de Especialización en Seguridad Informática p...Chema Alonso

Auditoría de TrueCrypt: Informe final fase IIChema Alonso

El juego es el mismoChema Alonso

El Hardware en Apple ¿Es tan bueno?Chema Alonso

Latch en Linux (Ubuntu): El cerrojo digitalChema Alonso

Hacking con PythonChema Alonso

Shuabang BotnetChema Alonso

Tu iPhone es tan (in)seguro como tu WindowsChema Alonso

Más de Chema Alonso (20)

CyberCamp 2015: Low Hanging Fruit

Índice Pentesting con Kali 2.0

Configurar y utilizar Latch en Magento

Cazando Cibercriminales con: OSINT + Cloud Computing + Big Data

New Paradigms of Digital Identity: Authentication & Authorization as a Servic...

CritoReto 4: Buscando una aguja en un pajar

Dorking & Pentesting with Tacyt

Pentesting con PowerShell: Libro de 0xWord

Foca API v0.1

Recuperar dispositivos de sonido en Windows Vista y Windows 7

It's a Kind of Magic

Ingenieros y hackers

Cuarta Edición del Curso Online de Especialización en Seguridad Informática p...

Auditoría de TrueCrypt: Informe final fase II

El juego es el mismo

El Hardware en Apple ¿Es tan bueno?

Latch en Linux (Ubuntu): El cerrojo digital

Hacking con Python

Shuabang Botnet

Tu iPhone es tan (in)seguro como tu Windows

Último

Artificial Intelligence Chap.5 : UncertaintyKhushali Kathiriya

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobeapidays

Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1

🐬 The future of MySQL is Postgres 🐘RTylerCroy

MINDCTI Revenue Release Quarter One 2024MIND CTI

Partners Life - Insurer Innovation Award 2024The Digital Insurer

Scaling API-first – The story of a global engineering organizationRadu Cotescu

Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsRoshan Dwivedi

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoffsammart93

A Year of the Servo Reboot: Where Are We Now?Igalia

HTML Injection Attacks: Impact and Mitigation StrategiesBoston Institute of Analytics

Powerful Google developer tools for immediate impact! (2023-24 C)wesley chun

Exploring the Future Potential of AI-Enabled Smartphone Processorsdebabhi2

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...DianaGray10

Strategies for Landing an Oracle DBA Job as a FresherRemote DBA Services

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProduct Anonymous

Why Teams call analytics are critical to your entire businesspanagenda

TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc

2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong