Sql injection penetrate
SQL Injection Attacks
This was part of a larger security review, and though we'd not actually used SQL injection to penetrate a network before, we were pretty familiar.
Does this site look plain?
Description:Fortunately, there are ways to prevent an SQL injection attack: We don't know the specific names of the fields or table involved, but we do know their nature, and we'll make some good guesses later. Be aware that "sanitizing the input" doesn't mean merely "remove the quotes", because even "regular" characters can be troublesome. If we get a server error, it means our SQL is malformed and a syntax error was thrown: It's a fair bet that many Intranet sites also have accounts on the corporate Windows network, and perhaps some of them have used the same password in both places. This is the case whether we get the "email unknown" or "password was sent" response.
User Comments 2
Post a comment
Comment: