Squeeza: The SQL Injection Future?
ID: 07757da6-d9d9-58eb-b96e-aa9f6bf6094e
STIX ID: report--07757da6-d9d9-58eb-b96e-aa9f6bf6094e
Feed Name: SensePost Blog
This document announces and briefly describes 'squeeza,' a SQL injection exploitation tool that enables full binary file transfers from SQL Server, database enumeration, and data exfiltration via DNS, HTTP error messages, and timing channels, with code availability and requests for feedback following a conference demo.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.