More Advanced SQL Injection

[article]
Member Submitted
Summary:

This paper addresses the subject of SQL Injection in a Microsoft SQL Server/IIS/Active Server Pages environment, but most of the techniques discussed have equivalents in other database environments.

This paper addresses the subject of SQL Injection in a Microsoft SQL Server/IIS/Active Server Pages environment, but most of the techniques discussed have equivalents in other database environments.

It should be viewed as a followup, or perhaps an appendix, to the previous paper, " Advanced SQL Injection. " The paper covers in more detail some of the points described in its predecessor, providing examples to clarify areas where the previous paper was perhaps unclear.

An effective method for privilege escalation is described that makes use of the openrowset function to scan a network. A novel method for extracting information in the absence of "helpful" error messages is described. Finally, a number of miscellaneous observations and useful hints are provided, collated from responses to the original paper, and various conversations around the subject of SQL injection in

About the author

Chris Anley's picture Chris Anley

Chris Anley is a director at NGSSoftware, the world's leading security vulnerability research company. When he's not spending time auditing software or websites for security bugs, he writes whitepapers that help folks do it for themselves. You can read more about NGSSoftware here.

AgileConnection is one of the growing communities of the TechWell network.

Featuring fresh, insightful stories, TechWell.com is the place to go for what is happening in software development and delivery.  Join the conversation now!

Upcoming Events

May 04
May 04
May 04
Jun 01