Penetration Testing mailing list archives
Re: SQL injection
From: James Riden <j.riden () massey ac nz>
Date: 10 Jun 2005 15:01:14 +1200
Tim <tim-pentest () sentinelchicken org> writes:
I am sure many IPS/IDSes are great for stopping a lot of attacks. I find it incredibly hard to believe that they stop all. It is far better to write good code in the first place.
Definitely true.
To those people out there who recommended this or that IPS/IDS: Have you tested these against real attacks?
Yes, I've caught real attacks using snort with the bleeding rules. As you say, perhaps only the obvious ones though ("xp_cmdshell"). -- James Riden / j.riden () massey ac nz / Systems Security Engineer GPG public key available at: http://www.massey.ac.nz/~jriden/ This post does not necessarily represent the views of my employer.
Current thread:
- RE: SQL injection, (continued)
- RE: SQL injection Bénoni MARTIN (Jun 09)
- Re: RE: SQL injection travis . barlow (Jun 09)
- RE: SQL injection Ofer Shezaf (Jun 09)
- RE: SQL injection Hecber Cordova (Jun 09)
- Exploit Repositories and Due Diligence Jeff (Jun 09)
- RE: Exploit Repositories and Due Diligence Leandro Reox (Jun 09)
- RE: Exploit Repositories and Due Diligence Sahir Hidayatullah (Jun 10)
- RE: Exploit Repositories and Due Diligence Carl Tucker (Jun 14)
- RE: Exploit Repositories and Due Diligence Carl Tucker (Jun 20)
- RE: SQL injection Hecber Cordova (Jun 09)
- Re: SQL injection Tim (Jun 09)
- Re: SQL injection James Riden (Jun 09)
- RE: SQL injection Leandro Reox (Jun 09)
- RE: SQL injection Todd Towles (Jun 09)
- RE: SQL injection Leandro Reox (Jun 10)
- Re: SQL injection Hernán M . Racciatti (Jun 10)
- Re: SQL injection DokFLeed (Jun 10)
- RE: SQL injection Leandro Reox (Jun 10)
- RE: SQL injection Faiz Ahmad Shuja (Jun 12)