The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
118 views

Using modsec to block a sql injection?

I'm seeing malicious traffic (SQL injections) directed towards some of my websites and I want to use modsec to block the requests. An attack will look something like the following: ...
2
votes
3answers
163 views

MySQL Injection Attacks? Random URL's Causing Errors

We just started running our own web server a few months ago on Rackspace (they are great). I use NewRelic (also pretty cool) to monitor server usage and I am getting error alerts that appear to me to ...
1
vote
1answer
558 views

Setting up mod_security for phpmyadmin on 12.04

Having issues with mod_security blocking functions of phpmyadmin such as server_databases.php, as sql injection attacks. Is there a way to correct this, or do I need to disable mod_security totally ...
0
votes
1answer
64 views

Multiple POST SQL injection from same IP [duplicate]

Recently I checked my Apache domlog and noticed the following attack: POST ...
0
votes
1answer
107 views

Are there simple command line tools to decode a SQL Injection request string? [closed]

My web server periodically comes under attack, and I get a bunch of requests that look like /my.page?union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- Are ...
1
vote
1answer
167 views

Dynamic column enumeration for preventing SQL injection

I have an application which is completely for internal use but I'm trying to make sure I have my bases covered on SQL injection. Unless someone else has some information to point me otherwise there ...
0
votes
1answer
694 views

How to check web server logs for SQL injection?

If I have a PHP site hosted on Apache and someone hacks it using SQL injection, is there a way I can find out exactly which script caused this by looking at my web server logs? Or using some other ...
4
votes
2answers
172 views

Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials? [closed]

A friend pointed out a sql injection vulnerability one an application I work with. This search parameter: '; exec xp_cmdshell 'dir'; -- Returned the message: The EXECUTE permission was denied ...
1
vote
1answer
643 views

SQL injection security vulnerability in Plesk control pannel

I have plesk 10.3.1 and I received following email from the Plesk admin Parallels, the manufacturer and distributor of the Plesk Control Panel, has identified a SQL injection security ...
3
votes
1answer
267 views

Getting false-positive SQL Injection reports

We have installed a new Juniper SRX firewall with IDP, so the firewall is inspecting the traffic for suspicious activity. I've encountered 3 "false-positive" reports for SQL injection attacks that ...
0
votes
1answer
80 views

How can I make UrlScan test extensionless urls?

If I use UrlScan to block common SQL Injection attempts on asp- and aspx-files, I would do something like this: [SQLInjection] AppliesTo=.asp,.aspx DenyDataSection=SQLInjectionStrings ScanURL=0 ...
1
vote
4answers
1k views

What happened to IIS lockdown?

A long time ago before I left the Windows environment, there was such a thing as "IIS lockdown tool" - something that Microsoft provided for free. It was meant to well lock down your IIS instance and ...
2
votes
2answers
111 views

Legalities of freelance security consultant (SQLi) [closed]

Over the years I've gained a large amount of experience in Programming (my main occupation) and server admin, and as a result have a fairly decent backing in security practices. I'm also pretty good ...
1
vote
1answer
161 views

Is there a program that automaticly finds .PHP files on a web server and tests them for SQL injections?

I learned about the recent Barracuda hack, which sources say used an automated tool to locate some PHP file and test it for SQL injections. At my current company, I feel that security is not the top ...
2
votes
4answers
146 views

What response should be made to a continued web-app crack attempt?

I've issues with a continuous, concerted cracking attempt on a website (coded in php). The main problem is sql-injection attempts, running on a Debian server. A secondary effect of the problem is ...
6
votes
6answers
866 views

How should I set up protection for the database against sql injection when all the php scripts are flawed?

I've inherited a php web app that is very insecure, with a history of sql injection. I can't fix the scripts immediately, I rather need them to be running to have the website running, and there are ...
1
vote
2answers
384 views

is there any way to find out how I was hacked? What was the weak point?

one of my site hacked few times :( first I lost all databases, some tables were cleared and some of table's data had changed! than at the second hack, all tables were cleared and some php files' codes ...
4
votes
4answers
6k views

How to trace possible SQL injection attack?

We just had one of our (fairly important) wordpress databases inexplicably dropped. Fortunately we keep nightly backups so it's not going to be the end of the world, but I want to avoid or at least be ...
3
votes
1answer
426 views

SQL Injection Filter IIS

Currently running an IIS server with some legacy asp & sql. I was wondering if there are any good isapi filters which would automate checking for SQL injection attacks ?
2
votes
6answers
931 views

How do I report SQL Injection attacks (e.g. to User's ISP)?

EDIT : Sorry, my question clearly wasn't clear. I don't want to report attempted server attacks internally; we already have systems that log. record and report that activity. What I was keen to do ...
21
votes
15answers
3k views

HELP! Production DB was SQL INJECTED! [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY Geeze, I'm desperate! A few hours ago our production DB was sql-injected. I know we have some big holes in the system... because ...