 Your new post is loading...
|
Scooped by
footcow
|
Demonstration of sqlmap command execution features: sqlmap is launched against a PHP test page hosted on a Debian GNU/Linux 5.0 server with back-end database management system being PostgreSQL 8.4. The tool is instructed to identify possible SQL injections and exploit them by executing a command on the database server operating system. sqlmap first uploads a dynamic-linked library (DLL) used to create two user-defined functions (sys_exec() and sys_eval()) in the database. Then it asks the user if he wants to retrieve the command standard output. If the answer is positive, sqlmap executes the command once and stores its standard output in a support table. Either boolean-based blind SQL injection or UNION query SQL injection technique is used to dump the entry of this table and delete it afterwards. This technique is also implemented for MySQL. On Microsoft SQL Server, xp_cmdshell extended stored procedure is used to execute commands on the underlying operating system. sqlmap, sqlmap.sourceforge.net, is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of back-end database servers. It comes with a broad range of features lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
|
|
Scooped by
footcow
|
psycopg2 Python-PostgreSQL Database Adapter (psycopg2 2.3.0: Python-PostgreSQL Database Adapter http://twurl.nl/a2g0ix)
|
|
Scooped by
footcow
|
HelloI released a updated version of pst collection. What is a pst collection? It is a collection of usable functions for ...
|
|
Scooped by
footcow
|
|
|
Scooped by
footcow
|
A detailed look at how to implement asynchronous, master-slave replication in PostgreSQL using Slony-I, along with analysis of how this differs from using PGCluster for replication.
|
|
Scooped by
footcow
|
After nearly one month testing, we finally sent out pgpool-II 3.0 to the door on September 10, 2010. On that day SRA OSS, Inc. ...
|
|
Scooped by
footcow
|
HelloI found a following code on net. It's good example of bad code (written by PHP coder):01.CREATE OR REPLACE FUNCTION ...
|
|
Scooped by
footcow
|
HelloI am working with large transformations now. It is some like:CREATE TABLE source_table(..);CREATE TABLE ...
|
|
Scooped by
footcow
|
Continuing with my sysbench saga with PostgreSQL 9.0, I was generally not encountering any errors except recently. I found two ...
|
|
Scooped by
footcow
|
While I still haven't found a working way to test sysbench read-write test, I decided to continue on sysbench testing with ...
|
|
Scooped by
footcow
|
|
|
Scooped by
footcow
|
|
|
Scooped by
footcow
|
I did a little bit of work Tuesday night and Wednesday profiling PostgreSQL. I ran two different tests. The first ...
|
|
|
Scooped by
footcow
|
|
|
Scooped by
footcow
|
Run an efficient PostgreSQL database using Packt's new book. PostgreSQL 9.0 Administration Cookbook is a new book from Packt which offers the information the readers need to manage their live production databases on PostgreSQL. - PR11116012 (Run an efficient PostgreSQL database using Packt's new book: PRLog (Press Release) – Dec 01, 2010 – PostgreSQL 9... http://bit.ly/hGkPvt)
|
|
Scooped by
footcow
|
In this article we'll provide a summary of what PL/R is and how to get running with it. Since we don't like repeating ...
|
|
Scooped by
footcow
|
Life at a belgian navigation startup (Move a PostgreSQL database to a different tablespace | Routing Life: SELECT * FROM "pg_tables"; http://bit.ly/hOHqXw)
|
|
Scooped by
footcow
|
If you have high-traffic php applications connecting to a PostgreSQL backend, and you're not using pgpool for persistent connections, you're missing out on a great way to slash the load on your db server.
|
|
Scooped by
footcow
|
I finished patch that enable iteration over array. I hope so new syntax can helps to better readability. There are a few ...
|
|
Scooped by
footcow
|
Hello,I am working on migration a large dataset from archive to a new format. This work is joined with searching a small ...
|
|
Scooped by
footcow
|
I have written a tutorial to pgpool-II using PostgreSQL 9.0's streaming replication. The tutorial is designed to use minimum ...
|
|
Scooped by
footcow
|
Heroku releasing an update to our dedicated database service. Heroku PostgreSQL provides an improved upgrade path for our users ...
|
|
Scooped by
footcow
|
You certainly know that implementing dynamic triggers in PLpgSQL is
impossible. But I had a very bad night, being up from as ...
|
|
Scooped by
footcow
|
PGX had a client come to us recently with a rather nasty deadlock issue. It took far longer than we would have liked to figure ...
|
|
Scooped by
footcow
|
(RT @gnubyexample: Now I know there are more UK users of Postgresql, who might be interested in making it to Pgday.eu http://bit.ly/dPcbTK #organise #travel)
|
