Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: MS Access+pen-test

from [Jim Halfpenny] Network Security [Permanent Link]
Subject: Re: MS Access+pen-test
Date: Mon, 25 Jun 2007 18:08:46 +0100
On 13 Jun 2007 19:55:07 -0000, wymerzp@sbu.edu <wymerzp@sbu.edu> wrote: 
I was looking over a client's website when I discovered a classic (almost 
cliche) sql injection vulnerability (i.e. Username ' OR ''=' | Password ' OR 
''='). I did more poking and prodding and discovered that they are using MS 
Access for a backend. I know you can't string queries together (i.e. Select 
user from tbl where blah = var; Select...). My question is then, is there any 
'good way' to use sql injection against this database to drive home the 
severity of the lack of input validation? Currently, the best I got was access 
to non-sensitive information that one simply needed to supply an email for.

Thanks a lot,

Zach 

If any of the error messages give a clue as to the location of the
database .mdb file see if you can download it. Another common mistake
is to put the database in the web root somewhere.

Regards,
Jim Halfpenny

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: pen testing flash games., Jay
Next by Date:  Re: pen testing flash games., Noah
Previous by Thread:  MS Access+pen-test, wymerzp
Next by Thread:  FireCAT 1.1 Firefox Catalog of Auditing exTensions released, SD List
Indexes:  [Date] [Thread] [Top] [All Lists]