The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
Twelve Years of Service
Posts: 72
Threads: 3
Ebook - SQL Injection Attacks and Defense 05-25-2014, 11:33 PM
#1
Hey everyone,
i wanted to share this with you guys, this is a really good Ebook.
Maybe some of you already know this. if u do thats good
here a quick brief understanding what it is :
Code:
The book starts with describing various SQL Injection attack scenarios from different angles covering multiple operating systems. Also it covers different type of SQL Injection attacks in detail which makes it easy to understand. Rest of the book deals with defenses at different level, starting from development to deployment. Chapter 8 explains static analysis of code using the tools for identifying and preventing SQL injection vulnerabilities at the root itself. Chapter 9 focuses on putting up defenses on different operating systems and for various type of databases including MsSQL, MySQL, Oracle etc.
Download : Here
P.s if i need to upload to VT, just tell me.
and ill update the link.
•
Thirteen Years of Service
Posts: 4,425
Threads: 308
RE: Ebook - SQL Injection Attacks and Defense 05-27-2014, 07:04 PM
#2
Hmm, looks good. Thanks for the share.
•
Twelve Years of Service
Posts: 72
Threads: 3
RE: Ebook - SQL Injection Attacks and Defense 06-01-2014, 10:52 AM
#3
(05-27-2014, 07:04 PM)Aurora Wrote: Hmm, looks good. Thanks for the share.
Your welcome,
weird that you are the only one interested in this
because its really good material, im reading it myself aswell
•
Twelve Years of Service
Posts: 467
Threads: 35
RE: Ebook - SQL Injection Attacks and Defense 06-02-2014, 12:06 PM
#4
An SQL Injection is a very simple concept, you shouldn't need a whole book on it.
•
Twelve Years of Service
Posts: 72
Threads: 3
RE: Ebook - SQL Injection Attacks and Defense 06-02-2014, 12:09 PM
#5
(06-02-2014, 12:06 PM)antlers Wrote: An SQL Injection is a very simple concept, you shouldn't need a whole book on it.
hahahahhahaha
then u sir dont know much about SQL injection
no seriously, try to read the book, and u will find out its really advanced.
there are alot of sql injection types / bypasses etc
but sure if u dont want to u dont have to.
•
Twelve Years of Service
Posts: 467
Threads: 35
RE: Ebook - SQL Injection Attacks and Defense 06-02-2014, 12:11 PM
#6
(06-02-2014, 12:09 PM)rootaccess Wrote: hahahahhahaha
then u sir dont know much about SQL injection
no seriously, try to read the book, and u will find out its really advanced.
there are alot of sql injection types / bypasses etc
but sure if u dont want to u dont have to.
*How many SQL injection based 0days have you found?
**I have a great method to overcome WAFs, it is called adaptation.
•
Thirteen Years of Service
Posts: 4,425
Threads: 308
RE: Ebook - SQL Injection Attacks and Defense 06-02-2014, 06:22 PM
#7
(06-02-2014, 12:11 PM)antlers Wrote: *How many SQL injection based 0days have you found?
**I have a great method to overcome WAFs, it is called adaptation.
toplel. The man has a point.
•
Twelve Years of Service
Posts: 72
Threads: 3
RE: Ebook - SQL Injection Attacks and Defense 06-04-2014, 11:21 AM
#8
(06-02-2014, 12:11 PM)Dr.Jekyll and Mr.Hyde Wrote: *How many SQL injection based 0days have you found?
**I have a great method to overcome WAFs, it is called adaptation.
not alot, but hacked alot of websites with SQLI
also every WAF /IDS requires different bypasses.
i think thats what u meant with adaptation.
but i dont agree with what u say, that u dont need a whole book.
sure if u only want to learn the basics u wont Cool
there is even version 2 of this book aswell.
(This post was last modified: 06-04-2014, 11:29 AM by rootaccess.)
•
Twelve Years of Service
Posts: 467
Threads: 35
RE: Ebook - SQL Injection Attacks and Defense 06-04-2014, 11:41 AM
#9
(06-04-2014, 11:21 AM)rootaccess Wrote: not alot, but hacked alot of websites with SQLI
also every WAF /IDS requires different bypasses.
i think thats what u meant with adaptation.
but i dont agree with what u say, that u dont need a whole book.
sure if u only want to learn the basics u wont Cool
there is even version 2 of this book aswell. 
*
not alot, but hacked alot of websites with SQLI
How many notable websites have you injected SQL into?
**also every WAF /IDS requires different bypasses.
This isnt completely true but surely this would on just verify my point even more, if WAFs are different this book wont answer everything
***
sure if u only want to learn the basics u wont Cool Apart from this sentence not being articulated well, you have already said you have found 'not alot' of SQLi 0days (translating into none) so you clearly haven't learned anything apart from the basics.
•
Twelve Years of Service
Posts: 72
Threads: 3
RE: Ebook - SQL Injection Attacks and Defense 06-04-2014, 12:41 PM
#10
(06-04-2014, 11:41 AM)Dr.Jekyll and Mr.Hyde Wrote: *not alot, but hacked alot of websites with SQLI
How many notable websites have you injected SQL into?
**also every WAF /IDS requires different bypasses. This isnt completely true but surely this would on just verify my point even more, if WAFs are different this book wont answer everything
***sure if u only want to learn the basics u wont Cool Apart from this sentence not being articulated well, you have already said you have found 'not alot' of SQLi 0days (translating into none) so you clearly haven't learned anything apart from the basics.
when i say alot i mean alot, im not here to talk about what i've done or something.
i can tell u for an example.
we hacked for instance into a website (which had a sql vuln), got access to the database,
rooted the whole box, and got root to 34+ websites
also if i make spelling errors, or grammatical errors
its because my first language isnt English, so bear with me
i just shared the book, because i like to share knowledge.
Knowledge is Power
•
Users browsing this thread: 1 Guest(s)