 |
| R.I.P. 2012 |
forever. So if you have any files download them now. Bandgo joins megaupload.
GoodBye Bandgo !
Sunday, 29 July 2012
Goodbye To Bandgo.... (Closing On 31 July 2012)
forever. So if you have any files download them now. Bandgo joins megaupload.
SQL Injection Attacks and Defense
SQL Injection is one of the most popular web attacks that the security world has ever witnessed since the evolution of Internet. Till date it remains one of the less understood vulnerability from web security perspective as indicated by growing number of SQL injection attacks.
In this direction, this book is set to clear apart those short comings and present real facts about the insecurities surrounding the SQL Injection.
Here is the table of contents…
Chapter 1: What is SQL Injection?
Chapter 2: Testing for SQL Injection
Chapter 3: Reviewing Code for SQL Injection
Chapter 4: Exploiting SQL Injection
Chapter 5: Blind SQL Injection Exploitation
Chapter 6: Exploiting the Operating System
Chapter 7: Advanced Topics
Chapter 8: Code-Level Defenses
Chapter 9: Platform-Level Defenses
Chapter 10: References
Chapter 2: Testing for SQL Injection
Chapter 3: Reviewing Code for SQL Injection
Chapter 4: Exploiting SQL Injection
Chapter 5: Blind SQL Injection Exploitation
Chapter 6: Exploiting the Operating System
Chapter 7: Advanced Topics
Chapter 8: Code-Level Defenses
Chapter 9: Platform-Level Defenses
Chapter 10: References
The book starts with describing various SQL Injection attack scenarios from different angles covering multiple operating systems. Also it covers different type of SQL Injection attacks in detail which makes it easy to understand. Rest of the book deals with defenses at different level, starting from development to deployment. Chapter 8 explains static analysis of code using the tools for identifying and preventing SQL injection vulnerabilities at the root itself. Chapter 9 focuses on putting up defenses on different operating systems and for various type of databases including MsSQL, MySQL, Oracle etc.
Compared to any of the books produced so far, this book does real justice to the subject by comprehensively explaining both sides of the game, the attacking & defending against the SQL injection.
Written by the experts the book covers from basic to advanced levels and it is highly recommended for any one involved in the web security.
69 percent increase in SQL attacks seen in recent months
The number of SQL attacks jumped by nearly two thirds earlier this year according to cloud hosting firm FireHost who recorded over 450,000 blocked SQL injection attacks between the first and second quarter this year.
According to a report in ComputerWeekly, the firm claimed this week that it protected its users from 17 million cyber attacks from April to June 2012. 469,983 of those attacks were SQL injections, up from 277,770 attacks earlier this year, a 69 percent jump.
While security statistics have an intrinsic ebb and flow to them, FireHost’s numbers mark a spike. In this year’s X-Force Trend and Risk Report, IBM noted a 46 percent drop in SQL injections last year while a study by WhiteHat Security earlier this year noted the number of SQL injections in sites was also decreasing. After analyzing 7,000 websites, the firm found (.PDF) that only 11 percent of the sites contained SQL injection vulnerabilities while only four percent of the sites carried at least one SQL injection flaw compared to the overall vulnerability population.
A hacker group claimed to have used a SQL injection to infiltrate Yahoo earlier this month when 450,000 e-mail addresses and passwords belonging to the site’s Voices users were leaked online.
According to a report in ComputerWeekly, the firm claimed this week that it protected its users from 17 million cyber attacks from April to June 2012. 469,983 of those attacks were SQL injections, up from 277,770 attacks earlier this year, a 69 percent jump.
While security statistics have an intrinsic ebb and flow to them, FireHost’s numbers mark a spike. In this year’s X-Force Trend and Risk Report, IBM noted a 46 percent drop in SQL injections last year while a study by WhiteHat Security earlier this year noted the number of SQL injections in sites was also decreasing. After analyzing 7,000 websites, the firm found (.PDF) that only 11 percent of the sites contained SQL injection vulnerabilities while only four percent of the sites carried at least one SQL injection flaw compared to the overall vulnerability population.
A hacker group claimed to have used a SQL injection to infiltrate Yahoo earlier this month when 450,000 e-mail addresses and passwords belonging to the site’s Voices users were leaked online.
A new Morto worm infection attacks exe files
A new strain of the Morto worm has added a file infection capability in addition to its existing ability to compromise remote desktop connections, according to new research from Microsoft.
Now Morto is infecting files in the default RDP file share, ‘\\tsclient,’ after it determines which drives it can connect to. According to Microsoft's research, Morto is targeting all shared drives on the network.
The worm is infecting .EXE files on default RDP and administrative shares as well as removable drives, and it marks each file it infects with the letters ‘PPIF.’ However, the worm is avoiding files that contain strings like ‘windows,’ ‘winnt,’ ‘qq,’ ‘outlook,’ ‘system volume information,’ or ‘recycler’ in their path.
Morto is using a mutex (mutual exclusion) called ‘Global\_PPIftSvc’ to avoid multiple injections into the same processes. It stores its payload in the registry and has the capacity to download new or updated instructions from a remote host, which are decrypted and executed later.
The Microsoft Malware Protection Center recommends that administrators use strong passwords to avoid this sort of infection.
A previous iteration of the Morto worm popped up a year ago when it began infecting machines by running a brute-force password-attack on the remote desktop protocol (RDP) service. At the time, researchers said it was the first worm to use such a tactic.
Now Morto is infecting files in the default RDP file share, ‘\\tsclient,’ after it determines which drives it can connect to. According to Microsoft's research, Morto is targeting all shared drives on the network.
The worm is infecting .EXE files on default RDP and administrative shares as well as removable drives, and it marks each file it infects with the letters ‘PPIF.’ However, the worm is avoiding files that contain strings like ‘windows,’ ‘winnt,’ ‘qq,’ ‘outlook,’ ‘system volume information,’ or ‘recycler’ in their path.
Morto is using a mutex (mutual exclusion) called ‘Global\_PPIftSvc’ to avoid multiple injections into the same processes. It stores its payload in the registry and has the capacity to download new or updated instructions from a remote host, which are decrypted and executed later.
The Microsoft Malware Protection Center recommends that administrators use strong passwords to avoid this sort of infection.
A previous iteration of the Morto worm popped up a year ago when it began infecting machines by running a brute-force password-attack on the remote desktop protocol (RDP) service. At the time, researchers said it was the first worm to use such a tactic.
Subscribe to:
Posts (Atom)