SQLViking: Pillaging your Data
Talkat AppSec California 2015 · on Wednesday, 2015-01-28· at 15:00· Annenberg Community Beach House: Track 2, 415 Pacific Coast Hwy·
summary
A small open source tool called SQLViking passively logs SQL queries and result sets with a scout component and actively injects arbitrary SQL via TCP injection with a pillage component, requiring on‑subnet access. Current beta supports MySQL and partial TDS, runs on Python 2.7 using scapy, is packaged as a Vagrant demo and Raspberry Pi deployable device, captures real schema and dozens of queries (demo shows ~39), and sometimes breaks client connections when injecting.
AI-written summary · about
chapters (5)
related talks
35mBreakout Session
22mSecure Your Code — Injections and Logging
01h 05msqlmap - security development in Python
32mBecause SQL is everywhere but you don't want to use it
47mSQl Database Server Request from the Browser
41mSQL Injection Isn't Dead: Smuggling Queries at the Protocol Level
20mTeaching elephants to fish
36mGive Me a SQL Injection, I Shall PWN IIS and SQL Server