Collaborate Disseminate
MariaDB announced the immediate availability of MariaDB SkySQL through the Google Cloud Marketplace. SkySQL is the first database-as-a-service (DBaaS) to unlock the full power of MariaDB Platform for transactions, analytics and both, optimized with a c… Continue reading MariaDB announces immediate availability of MariaDB SkySQL through Google Cloud Marketplace
MariaDB announced the immediate availability of MariaDB SkySQL, the first database-as-a-service (DBaaS) to unlock the full power of MariaDB Platform for transactions, analytics or both, and optimized with a cloud-native architecture. SkySQL delivers th… Continue reading MariaDB SkySQL: Deploy production databases for mission-critical applications running in the cloud
I’ve been trying to do a simple SQL injection at a database that has one input (name). I’ve tried “peter’ SELECT version();” which gives me the following:
Error description: You have an error in your SQL syntax; check the… Continue reading SQL Injection syntax wrong
A researcher has just published a zero-day security bug in one of the web’s most popular database administration software packages. Continue reading Server-squashing zero-day published for phpMyAdmin tool
Newer versions of MariaDB (a MySQL database server fork) have a new password based auth scheme called “ed25519”. The docs are very sparse regarding how it works and what it does.
https://mariadb.com/kb/en/library/authenticat… Continue reading How does MariaDB’s ed25519 auth scheme work?
I’ve recently had an interesting interview exercise I haven’t completed and it does puzzle me what kind of filter/protection they’ve used.
The vuln app is a PHP with simple MariaDB (5.5.56) back-end, where name FORM is vulner… Continue reading SQL Injection bypass UNION filter/restriciton
According to Microsoft’s Documentation, Azure should be configured to use SSL for connections.
In regards to default settings, they state the following:
By default, the database service should be configured to require SS… Continue reading What is the default cipher for SSL connections in Azure for MariaDB?
I am implementing a C++ server with a mariadb backend. I have to access my database and I do so using the mariadbpp (its c++ connector). Though I can use mysql_config_editor and store the passwords in an (encrypted) .cnf file, mariadbpp’s … Continue reading Is it secure to store my mysql password in a const std::string?
I am testing a sql injection to a website. And spending several hours i just become to get the version of the database.
test.com/abc.php?query=1&limit=3 procedure analyse(extractvalue(rand(),concat(0x3a,version())),1);
… Continue reading Exploiting MairaDB Sql Injection with procedure analyse and extractvalue()
I’ve recently found a SQL-injection vulnerability in one of our web applications. I’ve been able to exploit this SQLi, but only able to extract some very basic information. I’m not an expert pentester or SQL-master but this intrigues me an… Continue reading SQL-injection, unable to get it to work!