exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

dc-15-meer_and_slaviero-WP.pdf

Posted Aug 11, 2007

Authored by Haroon Meer, Marco Slaviero | Site sensepost.com

Whitepaper discussing cross site request timing attacks. This was originally presented at Black Hat 2007 and Defcon 15.

tags | paper

SHA-256 | 88fce15c0a9ed8dc4bc6ad55deb64e3a3b97add18472559f9a0f7481f2f6d3d2

Download | Favorite | View

Related Files

squeeza-0.21.tar.gz

Posted Aug 11, 2007

Authored by Haroon Meer, Marco Slaviero | Site sensepost.com

squeeza is a tool helps exploits SQL injection vulnerabilities in broken web applications. Its functionality is split into creating data on the database (by executing commands, copying in files, issuing new SQL queries) and extracting that data through various channels (dns, timing, http error messages).

tags | tool, web, scanner, vulnerability, sql injection

systems | unix

SHA-256 | ed5de3ae05d77b7285523cc1c34484c73029565ace873988605f4b640b76d635

Download | Favorite | View