Tag Info

New answers tagged

4

How data is related or not within the database has nothing to do with SQLi. Flat files, NoSQL, etc. will not affect the ability for a user to perform unauthorized access to data. SQLi is about unsecured direct access to the database (in whatever form that is), resulting in a user manipulating that access in order to obtain data without the expected ...


1

The tool NoSQLMap includes a lot of functionality that directly targets MongoDB. https://github.com/tcstool/NoSQLMap There is an even-better video available that shows all sorts of attacks. You will also find that NoSQLMap calls out to the metasploit-framework, e.g., exploit/linux/misc/mongod_native_helper The project also suggests a viewing of this DEF ...


2

You should definitively restrict the range of your question and update the title accordingly. I'm answering here to your last question "has there been any successful injection attacks using camera input ?". Yes, I think you can say so. I'm particularly referring to a vulnerability which affected Google glasses. The Google glass would detect and handle ...


2

First, as you already observed, it's open to SQL injection. SQL injection isn't limited to things that start with "--" or "//"; it's only limited by the creativity of the attacker. Use parameterized queries. Always. Second, you should hash the password. PHP's builtin functions provide you with systems that automatically hash and provide a salt, so you have ...


63

This is most likely a blind SQL injection, testing whether you're vulnerable to SQL Injection by checking whether your server takes the specified time or more to reply to the request. This is not actually doing any data edit nor exposing anything; it's just checking whether you're vulnerable. It's also worth noting that this specifically targets MySQL ...


9

The data you've posted there appears to be similar to what an attacker might use for finding blind SQL Injection issues. A common technique for finding these issues is to have a conditional test which, if true, causes a timeout or sleep function to run. That way the attacker can tell whether it was successful by obvserving how long it takes the site to ...



Top 50 recent answers are included