Automating Boolean SQL Injection and Evading Filters

Name: Automating Boolean SQL Injection and Evading Filters
Uploaded: 2023-10-24T11:46:11Z
Channel: IppSec
Description: Sign up for Snyk at https://snyk.co/ippsec 00:00 - Talking about why I like SQL Boolean Injection 01:47 - Opening up the source code to the web app 02:0...

IppSec · Intermediate ·📊 Data Analytics & Business Intelligence ·2y ago

Sign up for Snyk at https://snyk.co/ippsec 00:00 - Talking about why I like SQL Boolean Injection 01:47 - Opening up the source code to the web app 02:00 - Snyk sponsor segment, talking about how it can find and fix vulnerabilities in your code in real time 04:30 - Demonstrating validating boolean injection with an or statement 07:00 - Showing a small python client I made for this video to play with the SQL Injection, then showing subqueries 09:20 - Showing how to enumerate columns in the database via brute-force guessing because we can't use information_schema 11:25 - Going over the LIMIT st…

Watch on YouTube ↗ (saves to browser)

Chapters (17)

Talking about why I like SQL Boolean Injection

1:47 Opening up the source code to the web app

2:00 Snyk sponsor segment, talking about how it can find and fix vulnerabilities in

4:30 Demonstrating validating boolean injection with an or statement

7:00 Showing a small python client I made for this video to play with the SQL Injec

9:20 Showing how to enumerate columns in the database via brute-force guessing beca

11:25 Going over the LIMIT statement so we can control which row we are looking at,

15:00 Showing the SUBSTR command so we can guess individual characters in a column/r

17:05 Talking about converting a string to number in mysql which makes it possible t

21:45 Start of creating our script, talking about the 3 functions we need, then crea

29:40 Automating getting the length of a column in our row

32:40 Automating exfilling the actual data and implementing a binary search/divide a

46:00 Debugging our script

47:35 Found the error, messed up the column name. Showing the algorithm we made to

49:00 Putting all the functions together to automate dumping all the data

54:50 Showing SQLMap has troubles with this, especially because the function (GEOGRA

57:10 Cleaning up and explaining the code a little bit

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →