Portcullis Labs - AR http://labs.portcullis.co.uk Labs Portcullis updates. en Labs portcullis Tue, 22 Feb 2011 11:21:36 GMT http://backend.userland.com/rss 60 Labs Portcullis hhttp://labs.portcullis.co.uk/mg/logo.gif http://labs.portcullis.co.uk GUI Access Through SQL Injection | Content Tue, 01 Apr 2008 15:30:22 GMT http://labs.portcullis.co.uk/application/gui-access-through-sql-injection/ <p>Slides presented by Alberto Revelli at OwaspDay II in Rome, 31/03/2008. They describe some SQL Injection tricks that can be used to get a full access to the DB server's operating system. The examples are mainly focused on MS SQL Server, but the concepts are valid for other DBMS as well.</p>