Re: SQL Injection - Waitfor delay

["Robin Wood" <dninja () gmail com>]

2008/10/13 xelerated <xelerated () gmail com>:
> Hi all,
> I am trying to find more information about a SQL Injection using
> "waitfor delay".
The talk by Joseph McCray at this years Toorcon about using blind sql
injection for downloading files was very impressive. Basically
grabbing files one byte at a time.

When the videos come out it is definitely worth watching.

Robin

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------