Research, demonstrations, and popcorn
The Russian District of Tambov’s government run website is vulnerable to a PostgreSQL injection. The site is not fixed as I have tried sending several notices to the site owners, but every email I have sent bounced back…
This vulnerability post originated from my old site and last updated on June 5th, 2013. I have done some slight updates now that I am moving it over to my new site. Let me start this post with a note: I like…
This is an older vulnerability I am posting for the sake of getting all my old content moved over to the new site. While browsing Gun Broker, I noticed several Smith and Wesson ads embedded in the page.…
This PDF is a paper I wrote in 2012 demonstrating different blind SQL injection methods on different database platforms. The information for Oracle is theoretical, due to my limitations at the time of platforms available for testing. If…