From SQL injection to shell: PostgreSQL edition

#1

Post by snyff » Sun, Dec 09, 2012, 9:31 AM UTC

From SQL injection to shell: PostgreSQL edition
pentesterlab.com

Re: From SQL injection to shell: PostgreSQL edition

#2

Post by ibotty » Sun, Dec 09, 2012, 11:17 AM UTC

be sure to read the prequel if you haven't done anything like that before: https://www.pentesterlab.com/from_sqli_to_shell.html

Re: From SQL injection to shell: PostgreSQL edition

#3

Post by dschiptsov » Sun, Dec 09, 2012, 11:52 AM UTC

What if I have no PHP?)

Re: From SQL injection to shell: PostgreSQL edition

#4

Post by herge » Sun, Dec 09, 2012, 5:41 PM UTC

If I use sql parameters in my queries, am I still vulnerable to SQL injection? What about using a (sane) ORM?

Basically, is it only php apps that hand-build queries that are vulnerable to SQL injection?

Re: From SQL injection to shell: PostgreSQL edition

#5

Post by jasonlotito » Sun, Dec 09, 2012, 5:55 PM UTC

herge wrote: post #4

If I use sql parameters in my queries, am I still vulnerable to SQL injection? What about using a (sane) ORM? Basically, is it only php apps that hand-build queries that are vulnerable to SQL injection?

Any app that hand-builds queries. PHP has nothing to do with this. Just happens to be the vehicle. The problem is simply insecure patterns.