Hi,
I have published a brief article on how enumeration of database
information through error messages could be simplified.
Several of the scripts I have looked at use the returning data from the
previous error message to modify the SQL statement so that data from the
next row can be fetched. The approach I have decided to use is slightly
different and independent of the data returned by the error message.
The article is available here:
http://www.cqure.net/wp/?p=61
Any comments or suggestions are very welcome and greatly appreciated.
Regards,
Patrik
---------------------------------------
Patrik Karlsson
Senior Partner
Inspect it AB
Box 852
SE-101 37 Stockholm
Sweden
Phone: +46 (0)8 613 7082
Mobile: +46 (0)76 831 7082
Fax: +46 (0)76 147 1826
www: http://www.inspectit.se
----------------------------------------
-------------------------------------------------------------------------
Sponsored by: Watchfire
Methodologies & Tools for Web Application Security Assessment
With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this Whitepaper today!
https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------
Received on Nov 29 2007
Intro
