The Making of the Second SQL Injection Worm

Malware Main Stage20 minOpen on YouTube ↗

Summit Siddharth explores the making of the second sql injection worm at DEF CON 17, examining malware-analysis and practical defenses.

Summary

Architecture and Background

The Making of the second SQL injection Worm Sumit Siddharth IT Security Consultant The "turbo" talk will focus on exploiting SQL injections in web applications with oracle back-end. Mostly exploiting Oracle sql injections in web applications is considered to be restricted to extraction of data only.

Vulnerability Analysis

Oracle database does not offer hacker friendly functionalities such as openrowset or xp_cmdshell for privilege escalation and O.S code execution. Further, as web API do not support execution of multiple query in single statement, the exploitation is further restricted.

Exploitation and Demonstrations

The Talk will highlight attack vector to achieve privilege escalation (from Scott to SYS) and O.S code execution by exploiting Oracle SQL injections in web applications. Further, there will be demo of how a worm could target an Oracle back-end just as it targeted the SQL server applications.

Remediation and Defensive Strategies

Sumit "sid" Siddharth works as a senior IT security consultant for Portcullis Computer Security in the UK. He has been a speaker at many security conferences including Troopers, OWASP Appsec and IT Underground. He also runs the popular IT security blog www.notsosecure.com. For copies of the slides and additional materials please see the DEF CON 17 Archive here:

Related talks

Main Stage·43 min

DEF CON
Malware
Date: Jul 2009
Location: Las Vegas

Binary Obfuscation from the Top Down

Sean Taylor

Sean Taylor explores binary obfuscation from the top down at DEF CON 17, examining malware-analysis and practical defenses.

malware-analysisreverse-engineeringpayloads+1

Main Stage·42 min

DEF CON
Malware
Date: Jul 2009
Location: Las Vegas

Win at Reversing Tracing and Sandboxing Through Inline Hooking

Nick Harbour

Nick Harbour explores win at reversing tracing and sandboxing through inline hooking at DEF CON 17, examining malware-analysis and practical defenses.

malware-analysisreverse-engineeringpayloads+1

Main Stage·20 min

DEF CON
Malware
Date: Aug 2013
Location: Las Vegas

A Thorny Piece of Malware and Me

Marion Marschalek

Marion Marschalek explores a thorny piece of malware and me at DEF CON 21, examining malware-analysis and practical defenses.

malware-analysisreverse-engineeringthreat-detection+1