Browse by Tags

• Best Practices
• Encryption
• Malware
• SQL Injection

• Microsoft Releases Tools To Address SQL Injection Attacks

  Remember the post by Aaron Bertrand titled Call a spade a spade! (SQL injection, or IIS vulnerability?) ? Microsoft has released 3 tools that deal with this SQL injection. These three tools include HP Scrawlr , UrlScan version 3.0 Beta , and a SQL Source Read More... Posted Wednesday, June 25, 2008 9:58 AM by Denis Gobo | 11 Comments Filed under: Security, SQL Injection

• Testing for SQL Server Vulnerabilities

  I found this SQL Server Testing (not unit but vulnerability) page and decided I would post a link to it since it has some useful stuff. The link is below http://www.owasp.org/index.php/Testing_for_SQL_Server Here is what is covered. Enjoy (or live in Read More... Posted Friday, May 02, 2008 1:27 PM by Denis Gobo | 2 Comments Filed under: Security

• Banking Trojan Targets 400 Banks, updates itself multiple times a day

  Not a SQL Server post but I still think that this is important. I was listening to Security Now yesterday and Steve Gibson talked about this silent banking trojan. This is just scary, read the excerpt of the article first. Targeting over 400 banks (including Read More... Posted Saturday, February 09, 2008 10:43 AM by Denis Gobo | 0 Comments Filed under: Security

• Whitepaper on Malware to Attack Databases

  Brian Kelly on his blog mentiones a whitepaper by Cesar Cerrudo : Data0: Next generation malware for stealing databases . This whitepaper describes how malware could be crafted to steal information out of databases. The attack will use the following techniques: Read More... Posted Friday, November 23, 2007 10:43 AM by Denis Gobo | 0 Comments Filed under: Best Practices, Security, Malware

• Hacker finds 492,000 unprotected Oracle, SQL Server database servers

  Litchfield, co-founder of Next Generation Security Software , ran port scans against 1,160,000 random IP addresses — TCP port 1433 (SQL Server) and 1521 (Oracle) — and found about 368,000 Microsoft SQL Servers directly accessible on the Internet and around Read More... Posted Thursday, November 15, 2007 12:38 PM by Denis Gobo | 6 Comments Filed under: Security

• How Is Your Sensitive Data Encrypted In The Database?

  Do you store encrypted data? If you do then how is it encrypted? Do you use the built in capabilities of SQL Server 2005/2008. If you answered yes to the last question then here is another question. What would happen if someone stole the hard drive or Read More... Posted Tuesday, November 13, 2007 11:28 AM by Denis Gobo | 4 Comments Filed under: Security, Encryption

• SQL Injection Cheat Sheet

  What is SQL Injection? From wikipedia : SQL injection is a technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal Read More... Posted Wednesday, September 19, 2007 11:33 AM by Denis Gobo | 2 Comments Filed under: Best Practices, Security, SQL Injection