Table of Contents

* Overview
* Identifying injections
o Recognizing errors
o Locating errors
o Identifying SQL injection vulnerable parameters
* Performing the injection
o Getting the syntax right
o Identifying the database
o Exploiting the injection
* UNION SELECT injections
o Counting the columns
o Identifying column types
* Summary
* About Imperva
* About Imperva SecureSphere™

“Build a Cheap MacMP3/AACServer” [Hack #30] covered how to create an awesome Mac-based digital music server. But what if you have a spare PC or a Mac that is too old to run OS X?

Most people think firewalls are all they need to secure their IT investment. Firewalls are very important, but they are just one piece of the overall security picture. Even with perfect installation, configuration, and maintenance, firewalls still must allow access to your public web servers. Hackers know how to use this permitted access to gain the foothold they need to gain access to your network. The kind of access a web server can give them is nothing short of complete administrative control.

The first step in attempting to determine the identity of the hacker was to search for clues in the directory containing the altered page. Interestingly enough, the process methodology mirrored standard troubleshooting procedures, or a police officer attempting to solve a crime. One must start at the scene of the crime and gather as many direct clues as possible, then work their way outward, examining the larger picture. Since the directory contained published Web pages, it existed as a subdirectory to the wwwroot directory (\inetpub\wwwroot).