Asegúr@IT IV - Remote File Downloading

•

4 j'aime•1,396 vues

The document discusses blind SQL injection attacks, where an attacker can extract information from a database without seeing the results directly. It describes how an attacker analyzes differences in responses to determine true or false results. Various techniques are presented, including booleanization, tools for automating extraction, and downloading files by querying data loaded into temporary tables. Time-based techniques using delays are also covered. The document demonstrates attacks on Microsoft SQL Server, Oracle, and MySQL databases.

Technologie

Chema Alonso Informática64 MS MVP Windows Security [email_address]

Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Code Injection Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object]

Blind Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Blind SQL Injection Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Blind SQL Injection Attacks ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Blind SQL Injection Attacks: Tools ,[object Object]

Time-Based Blind SQL Injection ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Time-Based Blind SQL Injection: Tools ,[object Object]

Marathon Tool ,[object Object],[object Object],[object Object],[object Object],[object Object]

BSQL Hacker & Deep Blind SQL Injection ,[object Object],[object Object],[object Object]

Accessing Files ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL Server 2K - External Data Sources ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL Server 2K – Bulk option ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

SQL Server 2k5 - ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

MySQL ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Oracle ,[object Object],[object Object],[object Object],[object Object],[object Object]

Oracle – DBMS_LOB ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Questions? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Contenu connexe

Tendances

Advanced SQL injection to operating system full control (slides)Bernardo Damele A. G.

Sql killedserverColdFusionConference

Sql injection 幼幼班hugo lu

SQL injection: Not only AND 1=1Bernardo Damele A. G.

บทที่4Waritsara Sonchan

Insertไกรสรวัฒน์ ปัญโญ

บทที่ 4 การเพิ่มข้อมูลลงฐานข้อมูลPriew Chakrit

Real-time Inverted Search in the Cloud Using Lucene and Stormlucenerevolution

Selenium Webdriver with data driven frameworkDavid Rajah Selvaraj

Solr vs. Elasticsearch, Case by Case: Presented by Alexandre Rafalovitch, UNLucidworks

How to Use JSON in MySQL WrongKarwin Software Solutions LLC

Data Warehouse and Business Intelligence - Recipe 3Massimo Cenci

Recipe 14 of Data Warehouse and Business Intelligence - Build a Staging Area ...Massimo Cenci

Elasticsearch, a distributed search engine with real-time analyticsTiziano Fagni

Oracle to vb 6.0 connectivityrohit vishwakarma

SQLMAP Tool Usage - A Heads UpMindfire Solutions

Developing on SQL AzureIke Ellis

Lab manual asp.netVivek Kumar Sinha

Datacon LA - MySQL without the SQL - Oh my! Dave Stokes

Tendances (19)

Advanced SQL injection to operating system full control (slides)

Sql killedserver

Sql injection 幼幼班

SQL injection: Not only AND 1=1

บทที่4

Insert

บทที่ 4 การเพิ่มข้อมูลลงฐานข้อมูล

Real-time Inverted Search in the Cloud Using Lucene and Storm

Selenium Webdriver with data driven framework

Solr vs. Elasticsearch, Case by Case: Presented by Alexandre Rafalovitch, UN

How to Use JSON in MySQL Wrong

Data Warehouse and Business Intelligence - Recipe 3

Recipe 14 of Data Warehouse and Business Intelligence - Build a Staging Area ...

Elasticsearch, a distributed search engine with real-time analytics

Oracle to vb 6.0 connectivity

SQLMAP Tool Usage - A Heads Up

Developing on SQL Azure

Lab manual asp.net

Datacon LA - MySQL without the SQL - Oh my!

En vedette

Let's creating your own PHP (tejimaya version)Kousuke Ebihara

State of Web Security RailsConf 2016IMMUNIO

Bug Hunting SafariJanie Clayton

Exploiting Firefox ExtensionsRoberto Suggi Liverani

Cross Context Scripting attacks & exploitationRoberto Suggi Liverani

Reversing JavaScriptRoberto Suggi Liverani

Philip Hung Cao - Cloud security, the journey has begunSecurity Bootcamp

Bridging the gap - Security and Software TestingRoberto Suggi Liverani

Xml external entities [xxe]mattymcfatty

Nguyen Phuong Truong Anh - Some new vulnerabilities in modern web applicationSecurity Bootcamp

15 Years of Web Security: The Rebellious Teenage YearsJeremiah Grossman

Million Browser BotnetJeremiah Grossman

110864103 adventures-in-bug-huntingbob dobbs

Richard Johnson, high performance fuzzingPacSecJP

Pham Ngọc Bắc - An toàn thông tin dưới góc nhìn Quản lý theo tiêu chuẩn Quốc...Security Bootcamp

XML と PHP のイケナイ関係 (セキュリティ的な意味で) -Introduction of XXE attack and XML Bomb with...Kousuke Ebihara

Trần Anh Khoa - Kautilya và Powershelltrong kỹ thuật tấn công tiếp cậnSecurity Bootcamp

Owasp Top 10 A1: InjectionMichael Hendrickx

Augmented reality in your web proxyRoberto Suggi Liverani

Exploratory Testing As A QuestChrishoneybee

En vedette (20)

Let's creating your own PHP (tejimaya version)

State of Web Security RailsConf 2016

Bug Hunting Safari

Exploiting Firefox Extensions

Cross Context Scripting attacks & exploitation

Reversing JavaScript

Philip Hung Cao - Cloud security, the journey has begun

Bridging the gap - Security and Software Testing

Xml external entities [xxe]

Nguyen Phuong Truong Anh - Some new vulnerabilities in modern web application

15 Years of Web Security: The Rebellious Teenage Years

Million Browser Botnet

110864103 adventures-in-bug-hunting

Richard Johnson, high performance fuzzing

Pham Ngọc Bắc - An toàn thông tin dưới góc nhìn Quản lý theo tiêu chuẩn Quốc...

XML と PHP のイケナイ関係 (セキュリティ的な意味で) -Introduction of XXE attack and XML Bomb with...

Trần Anh Khoa - Kautilya và Powershelltrong kỹ thuật tấn công tiếp cận

Owasp Top 10 A1: Injection

Augmented reality in your web proxy

Exploratory Testing As A Quest

Similaire à Asegúr@IT IV - Remote File Downloading

ShmooCON 2009 : Re-playing with (Blind) SQL InjectionChema Alonso

Time-Based Blind SQL Injection using Heavy QueriesChema Alonso

How "·$% developers defeat the web vulnerability scannersChema Alonso

Understanding and preventing sql injection attacksKevin Kline

Sql injectionNitish Kumar

Sql lite androidDushyant Nasit

Chapter 3.pptx Oracle SQL or local Android database setup SQL, SQL-Lite, codi...TAISEEREISA

Advanced Sql Injection ENGDmitry Evteev

SQL Server Security - Attack webhostingguy

SQL2SPARQLAlexandru Dron

Sql Injection Attacks(Part1 4)Hongyang Wang

SqlmapRushikesh Kulkarni

Chapter 14 sql injectionnewbie2019

03. sql and other injection module v17Eoin Keary

Python database accessSmt. Indira Gandhi College of Engineering, Navi Mumbai, Mumbai

Hackers Paradise SQL Injection Attacksamiable_indian

Sql injectionMehul Boghra

SQL InjectionAbhinav Nair

MySQL 8.0 New Features -- September 27th presentation for Open Source SummitDave Stokes

Sql injection manish fileyukta888

Similaire à Asegúr@IT IV - Remote File Downloading (20)

ShmooCON 2009 : Re-playing with (Blind) SQL Injection

Time-Based Blind SQL Injection using Heavy Queries

How "·$% developers defeat the web vulnerability scanners

Understanding and preventing sql injection attacks

Sql injection

Sql lite android

Chapter 3.pptx Oracle SQL or local Android database setup SQL, SQL-Lite, codi...

Advanced Sql Injection ENG

SQL Server Security - Attack

SQL2SPARQL

Sql Injection Attacks(Part1 4)

Sqlmap

Chapter 14 sql injection

03. sql and other injection module v17

Python database access

Hackers Paradise SQL Injection Attacks

Sql injection

SQL Injection

MySQL 8.0 New Features -- September 27th presentation for Open Source Summit

Sql injection manish file

Plus de Chema Alonso

CyberCamp 2015: Low Hanging FruitChema Alonso

Índice Pentesting con Kali 2.0Chema Alonso

Configurar y utilizar Latch en MagentoChema Alonso

Cazando Cibercriminales con: OSINT + Cloud Computing + Big DataChema Alonso

New Paradigms of Digital Identity: Authentication & Authorization as a Servic...Chema Alonso

CritoReto 4: Buscando una aguja en un pajarChema Alonso

Dorking & Pentesting with TacytChema Alonso

Pentesting con PowerShell: Libro de 0xWordChema Alonso

Foca API v0.1Chema Alonso

Recuperar dispositivos de sonido en Windows Vista y Windows 7Chema Alonso

It's a Kind of MagicChema Alonso

Ingenieros y hackersChema Alonso

Cuarta Edición del Curso Online de Especialización en Seguridad Informática p...Chema Alonso

Auditoría de TrueCrypt: Informe final fase IIChema Alonso

El juego es el mismoChema Alonso

El Hardware en Apple ¿Es tan bueno?Chema Alonso

Latch en Linux (Ubuntu): El cerrojo digitalChema Alonso

Hacking con PythonChema Alonso

Shuabang BotnetChema Alonso

Tu iPhone es tan (in)seguro como tu WindowsChema Alonso

Plus de Chema Alonso (20)

CyberCamp 2015: Low Hanging Fruit

Índice Pentesting con Kali 2.0

Configurar y utilizar Latch en Magento

Cazando Cibercriminales con: OSINT + Cloud Computing + Big Data

New Paradigms of Digital Identity: Authentication & Authorization as a Servic...

CritoReto 4: Buscando una aguja en un pajar

Dorking & Pentesting with Tacyt

Pentesting con PowerShell: Libro de 0xWord

Foca API v0.1

Recuperar dispositivos de sonido en Windows Vista y Windows 7

It's a Kind of Magic

Ingenieros y hackers

Cuarta Edición del Curso Online de Especialización en Seguridad Informática p...

Auditoría de TrueCrypt: Informe final fase II

El juego es el mismo

El Hardware en Apple ¿Es tan bueno?

Latch en Linux (Ubuntu): El cerrojo digital

Hacking con Python

Shuabang Botnet

Tu iPhone es tan (in)seguro como tu Windows

Dernier

Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal

A Domino Admins Adventures (Engage 2024)Gabriella Davis

Histor y of HAM Radio presentation slidevu2urc

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo

Real Time Object Detection Using Open CVKhem

Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong

Finology Group – Insurtech Innovation Award 2024The Digital Insurer

Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun

Advantages of Hiring UIUX Design Service Providers for Your BusinessPixlogix Infotech

Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1

The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los

TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc

How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes

Scaling API-first – The story of a global engineering organizationRadu Cotescu

GenCyber Cyber Security Day PresentationMichael W. Hawkins

A Year of the Servo Reboot: Where Are We Now?Igalia

Apidays New York 2024 - The value of a flexible API Management solution for O...apidays

Boost PC performance: How more available memory can improve productivityPrincipled Technologies

Dernier (20)

Understanding Discord NSFW Servers A Guide for Responsible Users.pdf

A Domino Admins Adventures (Engage 2024)

Histor y of HAM Radio presentation slide

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Real Time Object Detection Using Open CV

Handwritten Text Recognition for manuscripts and early printed texts

Axa Assurance Maroc - Insurer Innovation Award 2024

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Finology Group – Insurtech Innovation Award 2024

Data Cloud, More than a CDP by Matt Robison

Advantages of Hiring UIUX Design Service Providers for Your Business

Boost Fertility New Invention Ups Success Rates.pdf

The 7 Things I Know About Cyber Security After 25 Years | April 2024

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

How to Troubleshoot Apps for the Modern Connected Worker

Scaling API-first – The story of a global engineering organization

GenCyber Cyber Security Day Presentation

A Year of the Servo Reboot: Where Are We Now?

Apidays New York 2024 - The value of a flexible API Management solution for O...

Boost PC performance: How more available memory can improve productivity