SQL Injection is a vulnerability that is often missed by web application security scanners, and it’s a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited. Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations …
This tutorial explains in simple terms what the SQL Injection vulnerability is, and how real threats result from this typical exploitation. It features a sample exploitation scenario illustrating clear steps of what an attacker may do with a website which is vulnerable to error based SQL Injection.
In this screencast, you are going to learn a MySQL query trick. You might be already familiar with the SUM() and IF() functions. We will be combining them to come up with some useful queries. This can reduce the number of queries you need to run for fetching certain types …
In this video, you learn how to find matches and exceptions with outer joins.
Using NoSQL data stores makes you change the way you design and query data, so you have to learn new tools and methods to get the full power of your NoSQL DB. In this session we will focus on how to stop thinking ‘SQL and relations’ and start thinking ‘views …
This video explores the NoSQL movement: the general alternatives to relational databases (key-value stores, document-oriented databases, and graph databases) and some of the domains in which they provide the best fit. It also looks at ways to resolve the tension between relational databases and the alternatives, with examples of hybrid …
