WebApp Sec mailing list archives
Simplifying enumeration by error messages
From: Patrik Karlsson <patrik.karlsson () inspectit se>
Date: Thu, 29 Nov 2007 19:51:48 +0100
Hi, I have published a brief article on how enumeration of database information through error messages could be simplified. Several of the scripts I have looked at use the returning data from the previous error message to modify the SQL statement so that data from the next row can be fetched. The approach I have decided to use is slightly different and independent of the data returned by the error message. The article is available here: http://www.cqure.net/wp/?p=61 Any comments or suggestions are very welcome and greatly appreciated. Regards, Patrik --------------------------------------- Patrik Karlsson Senior Partner Inspect it AB Box 852 SE-101 37 Stockholm Sweden Phone: +46 (0)8 613 7082 Mobile: +46 (0)76 831 7082 Fax: +46 (0)76 147 1826 www: http://www.inspectit.se ---------------------------------------- ------------------------------------------------------------------------- Sponsored by: Watchfire Methodologies & Tools for Web Application Security Assessment With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this Whitepaper today! https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F -------------------------------------------------------------------------
Current thread:
- Simplifying enumeration by error messages Patrik Karlsson (Nov 29)
- Re: Simplifying enumeration by error messages Paul Johnston (Nov 29)