Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

NetSPI SQL Injection Wiki

netspi.com | vulnerability | #open-source | #sql-injection | #penetration-testing | #database-security | #wiki

Summary

Open-sources NetSPI's SQL injection wiki, a consolidated knowledge base spanning detection through attack queries across DBMSs, covering data extraction, obfuscation, and pivoting past the DB.
Published
Collected

original ↗

Related coverage

vulnerability · netspi.com
Preventing SQL Injection at the Database
SQL injection vulnerabilities are common out in the real world.
blog · netspi.com
Open Source Frameworks – How secure are they?
Open source doesn't mean secure: reviewing one company's untouched framework surfaced nearly 80% of 10,000+ findings, including SQL injection and persistent XSS—vet third-party code accordingly.
blog · netspi.com
SQL Server – Link….. Link….. Link….. and Shell: How to Hack Database Links in SQL Server!
Misconfigured SQL Server linked servers let attackers traverse database link networks, access unauthorized data, and deploy shells. The post covers enumerating links via the sysservers table.
blog · netspi.com
When Databases Attack – Finding Data on SQL Servers
Scott Sutherland shares scripts for finding sensitive data in SQL Server: a TSQL script sampling keyword-matching columns across databases, plus a Metasploit auxiliary module wrapping it.
blog · netspi.com
When Databases Attack: SQL Server Express Privilege Inheritance Issue
By default, SQL Server Express grants connect rights to BUILTIN\Users, letting any authenticated domain user reach instances with TCP listeners enabled. The author details the attack path and fixes.
blog · netspi.com
When Databases Attack: Hacking with the OSQL Utility
This blog will provide some examples that illustrate how the OSQL utility can be used to gain unauthorized access to systems, databases, and sensitive information.
back