3초기억력

이름 : sqlninja 설명 : a SQL Server injection & takeover tool URL : http://sqlninja.sourceforge.net/ 버전 : 0.2.1-r1 이름 : sqlmap 설명 : an automatic SQL injection tool entirely developed in Python 버전 : 0.5 URL : http://sqlmap.sourceforge.net SQLIer - SQLIer takes a vulnerable URL and attempts to determine all the necessary information to exploit the SQL Injection vulnerability by itself, requiring no us..

Function IsInjectionParam() Dim QueryString QueryString = LCase(Request.ServerVariables("QUERY_STRING")) IsInjectionParam = False If InStr(QueryString, "execute") > 0 Or InStr(QueryString, "xp_") > 0 Or InStr(QueryString, "sp_") > 0 Then IsInjectionParam = True Exit Function End If If (InStr(QueryString, "select") > 0 And InStr(QueryString, "from") > 0) Or (InStr(QueryString, "update") > 0 And I..

설치 후 해당 쿼리를 이용해서 제거 해주세요 위부터 하시면 됩니다 ============================================================================ 불필요한 권한 삭제 1) master database REVOKE EXECUTE ON xp_regread FROM public REVOKE EXECUTE ON xp_instance_regread FROM public REVOKE EXECUTE ON dbo.sp_runwebtask FROM public 2) msdb database REVOKE EXECUTE ON sp_add_job FROM public REVOKE EXECUTE ON sp_add_jobstep FROM public REVOKE EXECU..