Security
https://www.techrepublic.com.com/5138-1009-5764215.html
Have you had to fend off an SQL Injection attack? How did you defend yourself?
[b]Can you offer in security advice for the TechRepublic community?[/b]
by beads
I finally got around to downloading and reading this. Good article. Atleast its practical enough to give me the basics on trying it on our Web/SQL server setup. Glad to say we passed.
It seems that cleaning up your input should be second nature but then again. Past that point I don't see alot you can do with whats been offered here in the article. Are there other ways of breaking the link structure?
- beads
I'm assuming that you're asking for other ways to perform penetration testing on web-apps...
The webgoat project shows many interesting/current methods of bypassing controls.
Something that I didn't go into much depth in the article (and I wish I would have) is - changing value (injecting parameters, essentially) on the URL bar.
Ron
This discussion is closed to new replies.
Sort by Trending