Links to interesting, educational, informational, or just plain fun websites…

David Litchfield has just published two chapters from his book The Oracle Hacker’s Handbook: Hacking and Defending Oracle.

Indirect Privilege Escalation (PDF)

In this chapter, David gives two examples, one with CREATE ANY TRIGGER and another with CREATE ANY VIEW to demonstrate how these privileges can be abused to gain DBA privileges. In fact, a user who […]

Everything you wanted to know about SQL injection Review of several types of SQL injection attacks and how they occur and what web developers and end users can do to prevent them. […]