Collaborate Disseminate
When I was pentesting a cpanel web app I’ve got some passwords but while reading the tables the server went offline.
I can exclude that my ip wasn’t blocked because I tried to access the server through VPN and got the same r… Continue reading Can the server crash while testing with the sqlmap tool?
When I was pentesting a cpanel web app I’ve got some passwords but while reading the tables the server went offline.
I can exclude that my ip wasn’t blocked because I tried to access the server through VPN and got the same r… Continue reading Can the server crash while testing with the sqlmap tool?
When I was pentesting a cpanel web app I’ve got some passwords but while reading the tables the server went offline.
I can exclude that my ip wasn’t blocked because I tried to access the server through VPN and got the same r… Continue reading Can the server crash while testing with the sqlmap tool?
Let’s say I have two databases on the same server (e.g. AWS RDS), DB1 and DB2. There are two users with some restrictions, and each user is assigned to a different database. US1 have access to DB1, and US2 have access to DB2…. Continue reading How secure is a user in MySQL?
Normal SQL injections are no problem since I always use prepared statements, but how to protect oneself from second order SQL injections?
Edit: this already has an answer here.
I just ran across common_schema, a utility for MySQL database administrators. It is a SQL script that creates a schema called common_schema in your database and plenty of stored procedu… Continue reading Is common_schema safe?
I just ran across common_schema, a utility for MySQL database administrators. It is a SQL script that creates a schema called common_schema in your database and plenty of stored procedures.
I need it for a corporate database… Continue reading Is common_schema safe?
I rather foolishly allowed SQL injection into my server under certain circumstances. However I can’t quite see what the attack achieves, and how to repair whatever-it-is that was done.
This is the SQL in question:
‘and(sele… Continue reading What is the nature of this SQL injection attack?
Over a month ago we reported about two critical zero-day vulnerabilities in the world’s 2nd most popular database management software MySQL:
MySQL Remote Root Code Execution (CVE-2016-6662)
Privilege Escalation (CVE-2016-6663)
At that time, Polish se… Continue reading Critical Flaws in MySQL Give Hackers Root Access to Server (Exploits Released)
Critical vulnerabilities in MySQL and database servers MariaDB and PerconaDB can lead to arbitrary code execution, root privilege escalation, and server compromise. Continue reading Critical MySQL Vulnerabilities Can Lead to Server Compromise