Deep Blind SQL Injection is a new way to exploit Blind SQL Injections with a 66% reduction in the number of requests. Continue reading
This document discusses abusing Microsoft SQL Query wildcards to consume CPU in database servers. This can be achieved using only the search field present in most common web applications. Continue reading
Windows has had the ability to embed HTML into it’s user interface for many years. Right back to and including Windows NT 4.0, it has been possible to embed HTML into the task bar, but the OS has always maintained a sandbox, from which the HTML has been unable to escape. All this changes with Windows Vista. Continue reading
PostgreSQL is one of the most commonly used open source database management systems. Continue reading