CSIT Village·19 min
Sim Wei Jun
Sim Wei Jun examines this presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the protocol level.
sql-injectionpostgresqlprotocol-exploitation+1
sql-injection
28 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 28 talks · loading…
Black Hat·1 hr 33 min
David Litchfield
Presenters detail vulnerability discovery and exploitation in EU 2003 - SQL Injection and Data Mining Through Inference.
sql-injectioninjectionmining
Black Hat·36 min
Qi Deng · Bo Qu · Tao Yan
Security researchers examine technical aspects of Give Me a SQL Injection, I Shall PWN IIS and SQL Server.
sql-injectioninjectionshall+1
Black Hat·53 min
Esteban Martínez Fayó
Engineers explore architecture and security mechanisms for USA 2005 - Advanced SQL Injection in Oracle Databases.
sql-injectioninjectionoracle+1
Black Hat·22 min
Yuan Fan
Security researchers examine technical aspects of USA 2005 - SQL Injection Detection: Joint Force Database Auditing & Anomaly Intrusion Det..
detectionsql-injectiondatabase+2
Black Hat·45 min
Zachary Cutlip
Analysts investigate attack surfaces and defenses concerning USA 2012 - SQL Injection to MIPS Overflows: Rooting SOHO Routers.
sql-injectionroutersinjection+1
Hackers of CypherCon·27 min
Will McCardell | CypherCon 6.0
Will McCardell | CypherCon 6.0 investigates SQL Injection A history’ OR 1=1;.
historysql-injectioninjection
OWASP Foundation·25 min
Or Katz
Security researchers examine technical aspects of Temporal: Over 20 Years of SQL Injection Attacks in the Wild - Time to Refine and ... - Or Katz.
injection-attackssql-injectioninjection
OWASP Foundation·32 min
Juan Pablo Quiñe Paz
Juan Pablo Quiñe Paz details Topics of Interest: Using binary search algorithms for blind sql injection.
sql-injectioninjectionalgorithms
ROOTCON Hacking Conference·38 min
Presenters detail vulnerability discovery and exploitation in Farewell WAF Exploiting SQL Injection from Mutation to Polymorphism.
sql-injectioninjectionfarewell+3
SEC-T·1 hr 6 min
Sumit Siddharth
Sumit Siddharth investigates 2009 - More Advancements in SQL Injection Techniques.
sql-injectioninjectionadvancement+1
App Sec Village·21 min
niks · Charles Waterhouse
Reconnaissance and vulnerability discovery across enterprise banking software used by major financial institutions worldwide.
bankingbug-bountyaccess-control-bypass+2
App Sec Village·25 min
Iggy
Exploration of time-based blind SQL injection techniques and data extraction strategies through the lens of Operation GhostShell.
sql-injectiontiming-attacksdatabase+2
Creator Stage·51 min
Justin 'Rhynorater' Gardner
Recounts high-severity bug bounty discoveries from live hacking events, detailing complex chains from SQL injection to remote code execution.
bug-bountyappsecremote-code-execution+2
Hack In The Box Security Conference·33 min
Jakub Pruzinec · Quynh Anh Nguyen
Jakub Pruzinec examines #HITB2023HKT D1T1 - Injecting Brains Into Blind SQL Injection.
sql-injectioninjectionhitb2023hkt+3
Main Stage·38 min
Paul Gerste
Technique for bypassing prepared statements and database query validation by smuggling queries across database wire protocols.
sql-injectionprotocol-smugglingdatabase+2
BSidesCharm·54 min
2025 - SQL injection is a thing of the past… and other lies we tell ourselves.
sql-injectioninjectionthing+1
NahamSec·18 min
SQL Injection Explained With @Build - Hack - Secure + FREE LABS!.
sql-injectioninjectionexplained+3
The Beer Farmers·23 min
Security researchers examine technical aspects of BeerCon3 - Day 1 - Drew Jones: Mastering Blind SQL Injection.
sql-injectioninjectionbeercon3+3
Voting Village·29 min
John Odum
Examines cybersecurity challenges, SQL injection risks, and systemic vulnerabilities across state-level election management systems.
voting-villageelection-securitysql-injection+2
Main Stage·41 min
Omer Gull
Demonstrates arbitrary code execution achievable through malicious SQLite queries, requiring only a SQL injection primitive in any SQLite-backed application.
sqlitesql-injectionrce+2
Main Stage·21 min
Nick Galbreath
Nick Galbreath details copy of the slides for this talk are here: New Techniques in SQLi Obfuscation: SQL never before used in SQLi Nick Galbreath SQLi remains a popular sport in the security arms-race.
sql-injectionbbqsqlwaf-evasion+1
Main Stage·34 min
Jason A. Novak · Andrea London
Jason A. Novak and Andrea London details copy of the slides for this talk are here: Extras: SQL ReInjector - Automated Exfiltrated Data Identification Jason A.
sql-injectionbbqsqlwaf-evasion+1
Main Stage·55 min
Esteban Martínez Fayó
Esteban Martínez Fayó explores hacking and protecting oracle database vault at DEF CON 18, examining database-security and practical defenses.
database-securityoracle-dbsql-injection+1