[Security] SQL Injection Cheat sheet





From


Comments

Post a Comment

Để lại góp ý của bạn để blog của mình hoàn thiện hơn :))

Popular posts from this blog

[Hack crack] Tổng hợp Google Dork

Image
/includes/header.php?systempath= /Gallery/displayCategory.php?basepath= /index.inc.php?PATH_Includes= /nphp/nphpd.php?nphp_config[LangFile]= /include/db.php?GLOBALS[rootdp]= /ashnews.php?pathtoashnews= /ashheadlines.php?pathtoashnews= /modules/xgallery/upgrade_album.php?GALLERY_BASEDIR= /demo/includes/init.php?user_inc= /jaf/index.php?show= /inc/shows.inc.php?cutepath= /poll/admin/common.inc.php?base_path= /pollvote/pollvote.php?pollname= /sources/post.php?fil_config= /modules/My_eGallery/public/displayCategory.php?basepath= /bb_lib/checkdb.inc.php?libpach= /include/livre_include.php?no_connect=lol&chem_absolu= /index.php?from_market=Y&pageurl= /modules/mod_mainmenu.php?mosConfig_absolute_path= /pivot/modules/module_db.php?pivot_path= /modules/4nAlbum/public/displayCategory.php?basepath= /derniers_commentaires.php?rep= /modules/coppermine/themes/default/theme.php?THEME_DIR= /modules/coppermine/include/init.inc.php?CPG_M_DIR= /modules/coppermine/themes/c...
Read more

[TUT HACK] SQL Injection Cheat Sheet

Image
Lười đọc thì ko bao giờ lĩnh hội được điều gì cả :)) About SQL Injection Cheat Sheet Currently only for MySQL and Microsoft SQL Server, some ORACLE and some PostgreSQL . Most of samples are not correct for every single situation. Most of the real world environments may change because of parenthesis, different code bases and unexpected, strange SQL sentences. Samples are provided to allow reader to get basic idea of a potential attack and almost every section includes a brief information about itself. M : MySQL S : SQL Server P : PostgreSQL O : Oracle + : Possibly all other databases Examples; (MS) means : MySQL and SQL Server etc. (M*S) means : Only in some versions of MySQL or special conditions see related note and SQL Server Syntax Reference, Sample Attacks and Dirty SQL Injection Tricks Ending / Commenting Out / Line Comments Line Comments Comments out rest of ...
Read more

[Security] 2011Trend Report Sept

Image
The IBM X-Force 2011 Mid-year Trend and Risk report has been published. Woot! I have to say, this report is bursting with great information about the latest threats that have occurred in the first half of this year and even though we have witnessed many high-profile security breaches in the beginning of 2011, improvements in areas of computer security are being made, showing that the industry is making headway. We encourage readers to not only check out the highlights listed here, but read the full report for contributions from our colleagues in Rational AppScan, Emergency Response Services (ERS), Managed Security Services (MSS), BigFix, Guardium and Identity Access and Management. Each of these dedicated security professionals has taken a pro-active approach in their respective articles to assist readers with additional guidance. Understanding threats is the starting point, but knowing what actions to take next is just as important. So, let’s take a look at some of those hi...
Read more