虫虫首页| 资源下载| 资源专辑| 精品软件
登录| 注册

您现在的位置是:虫虫下载站 > 资源下载 > 其他书籍 > This paper addresses the subject of SQL Injection in a Microsoft SQL Server/IIS/Active Server Page

This paper addresses the subject of SQL Injection in a Microsoft SQL Server/IIS/Active Server Page

  • 资源大小:136 K
  • 上传时间: 2014-07-28
  • 上传用户:wg204wg
  • 资源积分:2 下载积分
  • 标      签: Server SQL Injection Microsoft

资 源 简 介

This paper addresses the subject of SQL Injection in a Microsoft SQL Server/IIS/Active Server Pages environment, but most of the techniques discussed have equivalents in other database environments. It should be viewed as a "follow up", or perhaps an appendix, to the previous paper, "Advanced SQL Injection". The paper covers in more detail some of the points described in its predecessor, providing examples to clarify areas where the previous paper was perhaps unclear. An effective method for privilege escalation is described that makes use of the openrowset function to scan a network. A novel method for extracting information in the absence of helpful error messages is described the use of time delays as a transmission channel. Finally, a number of miscellaneous observations and useful hints are provided, collated from responses to the original paper, and various conversations around the subject of SQL injection in a SQL Server environment.

相 关 资 源

您 可 能 感 兴 趣 的