Hi,
yesterday I gave a presentation titled "SQL injection exploitation
internals: How do I exploit this web application injection point?" to my
colleagues at my Company third internal conference.
The presentation has a preamble on SQL injection definition, sqlmap and
its features then I presented common and uncommon problems and
respective solutions with examples that a penetration tester or a SQL
injection tool developer faces when he wants to take complete advantage
of any kind of web application SQL injection flaw on real world web
applications.
I think that it is worth a read also for others so I put the slides
online on SlideShare at
http://www.slideshare.net/inquis/sql-injection-exploitation-internals-presentation
Cheers,
--
Bernardo Damele A. G.
E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F
|