26Jun/100
Verbose Error Messages In MySQL
I was truly amazed when found the information that it is possible to force MySQL to raise a verbose error message. Here is the trick:
SELECT 1 AND ExtractValue(1, CONCAT(0×5c, (SELECT @@VERSION)))
...which happily produces:
Error Code : 1105 XPATH syntax error: ‘\5.1.44-community’
Remark: As this is the SQL error, in PHP it should be handled manually by something like this:
echo mysql_error();
Credits naturally go to Dmitry Evteev http://devteev.blogspot.com/...
Tagged as: mysql exploitation, SQL injection, verbose error messages
No Comments
26Jun/100
It’s The Full Moon…
It's the full moon, so can't imagine a better time to start a new shiny blog about IT security and everything around... So let's take something to drink, switch on our high-tech toys and have some fun!
Filed under: Uncategorized
No Comments
Recent Posts
- Knowledge sharing event: Risk-based approaches to protecting your data – London, Tuesday 19th April
- Training – Hacking and Securing Oracle Database (11g)
- Changed language does not persist when Skype is restarted: how to solve the annoying issue
- More 3D Fun with Kinect and Delphi. You can grab and save still 3D frames!
- Having Fun with Kinect and Delphi (examples of 2D and 3D visualization)
- Smuggling .NET code inside batch files. Impossible? Who said that?
- Cross-site scripting explained (video)
- Innocent comment regarding sensitive information disclosure…
- Pentesting privilege escalation in web applications
- TinyWeb: Pocket-size Portable Web Server With CGI And PHP Support (!)
Popular
Archives
- April 2011 (2)
- January 2011 (1)
- December 2010 (3)
- October 2010 (1)
- September 2010 (8)
- August 2010 (8)
- July 2010 (8)
- June 2010 (2)
Categories
- .NET (1)
- Binary application security (11)
- Cryptography (2)
- Delphi (12)
- Exploitation practice (16)
- Fun (5)
- Java (1)
- Kinect (2)
- Mobile devices security (1)
- Pentesting (15)
- PHP (2)
- Skype (3)
- SQL (5)
- SQL injection (6)
- Uncategorized (9)
- Windows security (6)
Recent Tweets
- Knowledge sharing event: Risk-based approaches to protecting your data - London, Tuesday 19th April More info here: http://itsecuritylab.eu/ 2011/04/13
- Training at Blackhat 2011: Hacking and Securing Oracle 11g - highly recommended! More info: http://itsecuritylab.eu/ 2011/04/12
- Changed language does not persist when Skype is restarted: the solution and example how to manage Skype "remotely": http://itsecuritylab.eu 2011/01/03





