Advanced SQL Injection in Oracle databases
Topics (37 slides):
- Introduction
- SQL Injection attacks
- How to exploit
- Exploit examples
- SQL Injection in functions defined with AUTHID CURRENT_USER
- How to get around the need for CREATE PROCEDURE privilege - Example
- How to protect
- Buffer overflow attacks
- How to exploit
- Exploit examples
- Detecting an attack
- Remote attacks using SQL Injection in a web application
- Exploit examples
- Web application worms
- How to protect
- Summary
- Conclusions
The presentation includes many proof of concept exploit examples of these topics.
Publicité