Re: [Full-disclosure] Deep Blind SQL Injection Whitepaper

2008-08-20 Thread Marco Slaviero
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Ferruh Mavituna wrote: | This is a short whitepaper about a new way to exploit Blind SQL Injections. | It's implemented in BSQL Hacker ( | http://labs.portcullis.co.uk/application/bsql-hacker/ ). | | *It is possible gather information from a targe

Re: [Full-disclosure] DNS and NAT (was: DNS and CheckPoint)

2008-07-16 Thread Marco Slaviero
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 [EMAIL PROTECTED] wrote: | On Fri, 11 Jul 2008 11:01:33 EDT, Thomas Cross said: | |> Thanks for testing this. A number of other readers wrote me privately |> confirming your result with linux ipchains. I'm not sure what ipchains does |> when i