WebApp Sec mailing list archives

Deep Blind SQL Injection Whitepaper


From: "Ferruh Mavituna" <ferruh () mavituna com>
Date: Tue, 19 Aug 2008 14:38:55 +0100

This is a short whitepaper about a new way to exploit Blind SQL
Injections. It's implemented in BSQL Hacker (
http://labs.portcullis.co.uk/application/bsql-hacker/ ).

It is possible gather information from a target server with a 66%
reduction in the number of requests made of the server (compared to
normal Blind SQL Injection), requiring two rather than six requests to
retrieve each char.

Download:
https://labs.portcullis.co.uk/download/Deep_Blind_SQL_Injection.pdf



Regards,

--
Ferruh Mavituna
http://ferruh.mavituna.com

-------------------------------------------------------------------------
Sponsored by: Watchfire 
Methodologies & Tools for Web Application Security Assessment 
With the rapid rise in the number and types of security threats, web application security assessments should be 
considered a crucial phase in the development of any web application. What methodology should be followed? What tools 
can accelerate the assessment process? Download this Whitepaper today! 

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------


Current thread: