Simplifying enumeration by error messages

Hi,

I have published a brief article on how enumeration of database
information through error messages could be simplified. 

Several of the scripts I have looked at use the returning data from the
previous error message to modify the SQL statement so that data from the
next row can be fetched. The approach I have decided to use is slightly
different and independent of the data returned by the error message. 

The article is available here:
http://www.cqure.net/wp/?p=61

Any comments or suggestions are very welcome and greatly appreciated.

Regards,
Patrik

---------------------------------------
Patrik Karlsson
Senior Partner
Inspect it AB
Box 852
SE-101 37 Stockholm
Sweden

Phone: +46 (0)8 613 7082
Mobile: +46 (0)76 831 7082
Fax: +46 (0)76 147 1826
www: http://www.inspectit.se
----------------------------------------


-------------------------------------------------------------------------
Sponsored by: Watchfire 
Methodologies & Tools for Web Application Security Assessment 
With the rapid rise in the number and types of security threats, web 
application security assessments should be considered a crucial phase in the 
development of any web application. What methodology should be followed? What 
tools can accelerate the assessment process? Download this Whitepaper today! 

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------