HNGlance

Top Best New Show

From SQL injection to shell: PostgreSQL edition

https://www.pentesterlab.com/from_sqli_to_shell_pg_edition.html

by snyff • 14 years ago

30 4 14 years ago

PE

pentesterlab.com

Related Stories

Loading related stories...

Comments

4

ibotty• 14 years ago

be sure to read the prequel if you haven't done anything like that before: https://www.pentesterlab.com/from_sqli_to_shell.html

dschiptsov• 14 years ago

What if I have no PHP?)

herge• 14 years ago

If I use sql parameters in my queries, am I still vulnerable to SQL injection? What about using a (sane) ORM?

Basically, is it only php apps that hand-build queries that are vulnerable to SQL injection?

jasonlotito• 14 years ago

Any app that hand-builds queries. PHP has nothing to do with this. Just happens to be the vehicle. The problem is simply insecure patterns.

Source preview

pentesterlab.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms