Sinisterly
Ebook - SQL Injection Attacks and Defense - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Ebook - SQL Injection Attacks and Defense (/Thread-Ebook-SQL-Injection-Attacks-and-Defense)

Pages: 1 2

Ebook - SQL Injection Attacks and Defense - rootaccess - 05-25-2014

Hey everyone,

i wanted to share this with you guys, this is a really good Ebook.
Maybe some of you already know this. if u do thats good Smile

here a quick brief understanding what it is :

Code:
The book starts with describing various SQL Injection attack scenarios from different angles covering multiple operating systems. Also it covers different type of SQL Injection attacks in detail which makes it easy to understand. Rest of the book deals with defenses at different level, starting from development to deployment. Chapter 8 explains static analysis of code using the tools for identifying and preventing SQL injection vulnerabilities at the root itself. Chapter 9 focuses on putting up defenses on different operating systems and for various type of databases including MsSQL, MySQL, Oracle etc.

[Image: 457005_091028141648_SQL_Injection_Attack...efense.JPG]

Download : Here

P.s if i need to upload to VT, just tell me.
and ill update the link.

RE: Ebook - SQL Injection Attacks and Defense - Eclipse - 05-27-2014

Hmm, looks good. Thanks for the share.

RE: Ebook - SQL Injection Attacks and Defense - rootaccess - 06-01-2014

(05-27-2014, 07:04 PM)Aurora Wrote: Hmm, looks good. Thanks for the share.

Your welcome,
weird that you are the only one interested in this
because its really good material, im reading it myself aswell Smile

RE: Ebook - SQL Injection Attacks and Defense - superMAUS - 06-02-2014

An SQL Injection is a very simple concept, you shouldn't need a whole book on it.

RE: Ebook - SQL Injection Attacks and Defense - rootaccess - 06-02-2014

(06-02-2014, 12:06 PM)antlers Wrote: An SQL Injection is a very simple concept, you shouldn't need a whole book on it.

hahahahhahaha
then u sir dont know much about SQL injection
no seriously, try to read the book, and u will find out its really advanced.

there are alot of sql injection types / bypasses etc
but sure if u dont want to u dont have to.

RE: Ebook - SQL Injection Attacks and Defense - superMAUS - 06-02-2014

(06-02-2014, 12:09 PM)rootaccess Wrote: hahahahhahaha
then u sir dont know much about SQL injection
no seriously, try to read the book, and u will find out its really advanced.

there are alot of sql injection types / bypasses etc
but sure if u dont want to u dont have to.

*How many SQL injection based 0days have you found?

**I have a great method to overcome WAFs, it is called adaptation.

RE: Ebook - SQL Injection Attacks and Defense - Eclipse - 06-02-2014

(06-02-2014, 12:11 PM)antlers Wrote: *How many SQL injection based 0days have you found?

**I have a great method to overcome WAFs, it is called adaptation.

toplel. The man has a point.

RE: Ebook - SQL Injection Attacks and Defense - rootaccess - 06-04-2014

(06-02-2014, 12:11 PM)Dr.Jekyll and Mr.Hyde Wrote: *How many SQL injection based 0days have you found?

**I have a great method to overcome WAFs, it is called adaptation.

not alot, but hacked alot of websites with SQLI
also every WAF /IDS requires different bypasses.
i think thats what u meant with adaptation.

but i dont agree with what u say, that u dont need a whole book.
sure if u only want to learn the basics u wont Cool

there is even version 2 of this book aswell. Smile

RE: Ebook - SQL Injection Attacks and Defense - superMAUS - 06-04-2014

(06-04-2014, 11:21 AM)rootaccess Wrote: not alot, but hacked alot of websites with SQLI
also every WAF /IDS requires different bypasses.
i think thats what u meant with adaptation.

but i dont agree with what u say, that u dont need a whole book.
sure if u only want to learn the basics u wont Cool

there is even version 2 of this book aswell. Smile

*not alot, but hacked alot of websites with SQLI
How many notable websites have you injected SQL into?

**also every WAF /IDS requires different bypasses. This isnt completely true but surely this would on just verify my point even more, if WAFs are different this book wont answer everything

***sure if u only want to learn the basics u wont Cool Apart from this sentence not being articulated well, you have already said you have found 'not alot' of SQLi 0days (translating into none) so you clearly haven't learned anything apart from the basics.

RE: Ebook - SQL Injection Attacks and Defense - rootaccess - 06-04-2014

(06-04-2014, 11:41 AM)Dr.Jekyll and Mr.Hyde Wrote: *not alot, but hacked alot of websites with SQLI
How many notable websites have you injected SQL into?

**also every WAF /IDS requires different bypasses. This isnt completely true but surely this would on just verify my point even more, if WAFs are different this book wont answer everything

***sure if u only want to learn the basics u wont Cool Apart from this sentence not being articulated well, you have already said you have found 'not alot' of SQLi 0days (translating into none) so you clearly haven't learned anything apart from the basics.

when i say alot i mean alot, im not here to talk about what i've done or something.
i can tell u for an example.

we hacked for instance into a website (which had a sql vuln), got access to the database,
rooted the whole box, and got root to 34+ websites

also if i make spelling errors, or grammatical errors
its because my first language isnt English, so bear with me Smile

i just shared the book, because i like to share knowledge.
Knowledge is Power