[sqlmap-users] Fwd: [Full-disclosure] Blind Sql Injection With Regular Expression

[Andres R. <and...@gm...>]

FYI. Would be a nice to have in sqlmap :)


---------- Forwarded message ----------
From: R00T_ATI <r00...@ih...>
Date: Sun, Jun 12, 2011 at 2:45 PM
Subject: [Full-disclosure] Blind Sql Injection With Regular Expression
To: ful...@li...


New and fast attack for blind sql injection.

http://www.ihteam.net/papers/blind-sqli-regexp-attack.pdf

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



-- 
Andrés Riancho
Director of Web Security at Rapid7 LLC
Founder at Bonsai Information Security
Project Leader at w3af