The newest SQL Injection resources are on the SQL Injection page. For a reading order instead of a date order, see the SQL Injection learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2016-04-20 2016 | Vulnerability analysis, Security Papers, Exploit Tutorials - Part 12975 news 36 min read | Paper detailing advanced MSSQL injection techniques, including ODBC error message attacks, UNION attacks, and exploiting extended stored procedures. It covers blind SQL injection enumeration, explains common vulnerabilities in applications like Joomla, Mambo, and WordPress, and provides methods for testing for SQL injection flaws using single quotes and OR/AND operations. The document also touches upon audit log evasion and the creation of mass MSSQL injection worms, concluding with countermeasures against these attacks. → exploit-db.com |