Blind SQL Injection Discovery And Exploitation Technique
by Shreeraj Shah - Founder and Director of Blueinfy - Tuesday, 3 June 2008.
This paper describes a technique to deal with blind SQL injection spot with ASP/ASP.NET applications running with access to XP_CMDSHELL. It is possible to perform a pen test against this scenario by not having any kind of reverse access or display of error message. It can be used in a completely blind environment and successful execution can grant remote command execution on the target application with admin privileges.

Download the paper in PDF format here.

Spotlight

Whitepaper: Zero Trust approach to network security

Posted on 20 November 2014.  |  Zero Trust is an alternative security model that addresses the shortcomings of failing perimeter-centric strategies by removing the assumption of trust.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Mon, Nov 24th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //