Dailydave mailing list archives

Deep Blind SQL Injection Whitepaper


From: "Ferruh Mavituna" <ferruh () mavituna com>
Date: Tue, 19 Aug 2008 14:36:22 +0100

This is a short whitepaper about a new way to exploit Blind SQL Injections.
It's implemented in BSQL Hacker (
http://labs.portcullis.co.uk/application/bsql-hacker/ ).

*It is possible gather information from a target server with a 66% reduction
in the number of requests made of the server (compared to normal Blind SQL
Injection), requiring two rather than six requests to retrieve each char.
*
*Download:
*https://labs.portcullis.co.uk/download/Deep_Blind_SQL_Injection.pdf



Regards,

-- 
Ferruh Mavituna
http://ferruh.mavituna.com
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave

Current thread: