Download as PDF, PPTX
Uploaded byFrans Rosén
Time based CAPTCHA protected SQL injection through SOAP-webservice
Frans Rosén of detectify discusses SQL injection techniques through a SOAP webservice. He provides steps to create a proof of concept attack with as few requests as possible to find vulnerable storefronts. Examples are given of time-based SQL injection payloads using substring, ascii, and sleep functions to retrieve the username and potentially other information about the target host. A link is also provided to a paper on SQL injection optimization and obfuscation techniques.
Time based CAPTCHA protected SQL injection through SOAP-webservice
- 1. detectify Time based captchaprotected SQL injection through SOAP-webservice Frans Rosén @fransrosen
- 2.
- 3.
- 4.
- 5.
- 6. detectify Me need 1. Do a clear PoC – get data 2.As few requests as possible 3. Find ALL the store fronts! 4. ??? 5. PROFIT!!!
- 7.
- 8.
- 9.
- 10. detectify Down on the@ '-sleep((ascii(substring(user(), 21, 1)) - 90) / 2)-'
- 11.
- 12.
- 13.
- 14.
- 15.
- 16.
- 17. detectify Thanks! Frans Rosén (@fransrosen)– www.detectify.com