Collaborate Disseminate
I was reading into the basics of SQL injection attacks on w3schools here.
In the second example, I was curious as to why the equal sign was used. I have quoted within the line below.
" or ""="
Is there any particular … Continue reading Why does this SQL injection have an equals symbol?
Help me to decode belove password
68H++v5FX/kUty5/itzflw== Above is password store in sql table
68H++v5FX/kUty5/itzflw==
Above is password store in sql table
Continue reading Which Type of Password Encryption is this? and how to Decode it?
Microsoft has announced a new data protection feature for its… Continue reading Microsoft Introduces SQL Server Information Protection Sensitivity Labels
I’ve looked extensively for a duplicate question, but I couldn’t find anything that answers this question exactly.
I have a SQL Server that will be used to store data for a multi-tenant application. Every tenant will have their own databas… Continue reading How should SQL Server users be managed for a multi-tenant application?
As of this past November 9th 2021, AWS now offers the ability to switch between AWS provided licenses and bring your own licenses (BYOL) for Windows Server and SQL Server instances using the AWS License Manager. Changing the license type associated with your instances will retain the application, instance, data and configuration for that instance. […] Continue reading AWS Announces the Ability to Switch Windows Server and SQL Server License Types
My question is about what exploits are possible given the following, not how to prevent SQL injection. I would not use this code in a real application.
Using MSSQL Server 2019, imagine a stored procedure for a search that does something li… Continue reading Is this stored procedure vulnerable to SQL injection?
My question is about what exploits are possible given the following, not how to prevent SQL injection. I would not use this code in a real application.
Using MSSQL Server 2019, imagine a stored procedure for a search that does something li… Continue reading Is this stored procedure vulnerable to SQL injection?
Environment
I am creating a python application which writes to SQL.
It is compiled into an .exe and distributed to other computers in the business.
(Edit: The SQL server is hosted by our business, within our intranet. The password is also … Continue reading How do I secure SQL passwords when distributing executables?
An Active Directory domain is deployed, a domain controller on Windows Server 2019. A computer with SQL Server 2016 is added to it, which is launched under the srv service account. The attacker has unprivileged access to this SQL Server fr… Continue reading Equivalence of UNC Path Injection and Kerberoasting Attacks on SQL Server