June 02, 2009

SQL Injection Video

Watch one of the best 3 minute videos on a SQL Injection attack

After hearing 2 stories today (US Army Websites Hacked and Hackers Hit 40,000 Websites) about the plethora of Websites being hit with SQL Injection attacks, I thought this video was very appropriate.

In a mere 3 minutes, you’ll see a great example of how this attack works. The hacker first attempts to log into a University Website using a userid and password to illicit an error message. Once the error message is displayed, he goes into the source code to make changes to the settings, allowing allow him to access the site off-line using his credentials. The hacker now has full access to the entire database of students – grades, social security numbers, and dates of birth.

And here's some information on testing for a SQL Injection vulnerability from About.com.

by
Erin Swanson
Eswanson@cenzic.com


	Hackers hit U.S. Army websites
	SQL Injections used to hack into US Army Websites
	http://www.scmagazineus.com/Hackers-hit-US-Army-websites/article/137814/

	Hackers Hit 40,000 Websites with Mass Compromise
	SQL Injections used on over 40,000 Websites to cause mass compromise
	http://www.eweek.com/c/a/Security/Hackers-Hit-40000-Web-Sites-With-Mass-Compromise-224833/

	Video SQL Injection
	Watch one of the best 3 minute videos on an SQL Injection attack
	http://www.youtube.com/watch?v=MJNJjh4jORY

	Testing For SQL Injection Vulnerabilities
	About.com and their description of a SQL Injection Attack
	http://databases.about.com/od/security/a/sql_inject_test.htm

Topic Tags: sql injection

by Erin Swanson

↑top

link to this

Post a Comment

Title:

Summary:

Comment:

Links:

Your info:

Name:		Required; will be displayed with comment.
E-mail:		Required (in case we need to contact you); will NOT be displayed with comment.
Web:		Optional; will use to hyperlink your name in the comment.
Twitter:		Optional; allows visitors to follow you on Twitter.
Save this in my browser

Verification:

Type the characters you see in the picture above.

Letters are case sensitive.

Notice: Your thoughtful opinions are valued and encouraged, but all comments are moderated so there will be a delay between the time you post your comment and when it appears in this site. Please don't be offended if your comment is edited for clarity or to avoid questionable matters. Offensive or off-topic comments will be deleted.