SEARCH RESULTS
 
Showing 1-10 of 196 records
 
Expand article

New tools to block and eradicate SQL injection

2008-06-24 23:22:07 by manunkind in PC Sympathy
 
...injection attacks and announces three new tools to help identify and block these types of vulnerabilities. The advisory discusses the new tools, the purpose of each, and the way each complements the others.The goal of this blog post is to help you identify the best tool to use depending on your role (i.e. Web Developers vs. IT administrators...
 
Tags: sql, deploy sql filters, mass sql injection, sql injection tool, sql injection attacks, vulnerabilities similar, vulnerabilities, sql injection, sql injection vulnerabilities
 
 
 
 
Expand article

Bots Use SQL Injection Tool in New Web Attack

2008-05-14 21:56:04 by manunkind in PC Sympathy
 
...injection attacks on thousands of Websites: Its outfitting its bots with its own tool to launch SQL injection attacks on vulnerable sites The Asprox botnet, a relatively small botnet known mainly for sending phishing emails, has been spotted in the last few days installing an SQL injection attack tool on its bots. The bots then Google for...
 
Tags: sql injection, attack, mass sql injection, asprox, asprox botware, sql injection tools, asprox operators, bots, asprox botnet
 
 
 
 
Expand article

New SQL Injection Attacks Exploit Adobe Flash Flaw

2008-05-29 01:52:16 by manunkind in PC Sympathy
 
...injection attack, take four: Yet another wave of SQL injection attacks is exploiting an Adobe Flash vulnerability that appears to be coming from the same series of attacks originating from China The intent, as in previous attacks, has been to steal online gamers password credentials. But given the persistence and scope of the attacks over the...
 
Tags: linux stand-alone player, player, flash player version, attacks, flash player, sql injection attacks, appears, attack appears, nefarious swf files
 
 
 
 
Expand article

sqlninja 0.2.3 released - Advanced Automated SQL Injection Tool for MS-SQL

2008-05-30 12:13:12 by manunkind in PC Sympathy
 
...Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a DB Server when a SQL Injection vulnerability has...
 
Tags: sql injection, tool, sql injection tool, server, microsoft sql server, background sql injection, sqlninja, target sql server, remote sql server
 
 
 
 
Expand article

Secure SQL Server from SQL injection attacks

2008-07-02 12:20:19 by manunkind in PC Sympathy
 
...injection attacks are probably the most common way for hackers to strike Internet-facing SQL Server databases. No matter how secure your network is or how many firewalls you have in place, any application that uses dynamic SQL and allows for unchecked user input to be passed to the database is at risk for a SQL injection assault. Recent...
 
Tags: attacks, sql injection attacks, injection attacks, sql server, web hack attacks, sql server platform, sql injection tool, sql server databases, databases
 
 
 
 
Expand article

SQL injection attacks becoming more intense

The Article has images
2008-05-13 23:17:16 by manunkind in PC Sympathy
...injection attacks weve mentioned here and here are increasing in numbers and were seeing more domains being injected and used to host the attack files and we believe that there are now more than one group using a set of different automated tools to inject the code Previously these attacks have primarily pointed to IP addresses in China and...
 
Tags: attacks, sql injection tool, database attacks, microsoft offers assistance, database, domains, mass sql injection, backdoor, north america
 
 
 
 
Expand article

YAMSIA (Yet Another Massive SQL Injection Attack)

2008-07-18 12:48:32 by manunkind in PC Sympathy
 
...injection attack (or YAMSIA, if you prefer), this time being orchestrated by a botnet that has become known as Asproxbut first, a history lesson The code behind the Asprox botnet seems to have been around for quite some time now, but it was only in the last year that it has upgraded to a botnet where its main focus is to send phishing emails....
 
Tags: sql injection attack, botnet, asprox botnet, web attack, sql injection attacks, sql injection tool, asp pages, pages, web
 
 
 
 
Expand article

Lateral SQL Injection

2008-04-26 14:42:55 by manunkind in PC Sympathy
 
...injection using DATE or even NUMBER data types? In the past this has not been possible but as this paper will demonstrate, with a little bit of trickery, you can in the Oracle RDBMS Read the full story here (PDF) Related posts The Snare Of Unauthorized Requests Mass SQL injection sqlninja 0.2.2 Released - SQL Injection Tool SQL query...
 
Tags: sql injection, mass sql injection, sql injection tool, sql query injection, sans solves mystery, data types, plsql procedure, user input, oracle rdbms
 
 
 
 
Expand article

Microsoft offers assistance to combat mass SQL injection

2008-04-28 11:43:25 by manunkind in PC Sympathy
 
...injection vulnerabilities to inject the iframe into the database behind the web pages. It can thereafter contaminate all pages served by the database backend with code that tries to inject a trojan. Microsoft has analysed the attacks and has now published tips to help administrators protect their web servers In its security and IIS blogs,...
 
Tags: practices guidelines, guidelines, practices guidelines explain, security, microsoft, redmonds security experts, security advice, practices, mass sql injection
 
 
 
 
Expand article

SQL Injection Worm on the Loose