Rapid Blind SQL Injection Exploitation with BBQSQL

Presented at DEF CON 20 (2012), July 29, 2012, 3 p.m. (50 minutes).

Blind SQL injection can be a pain to exploit. When the available tools work they work well, but when they don't you have to write something custom. This is time-consuming and tedious. This talk will be introducing a new tool called BBQSQL that attempts to address these concerns. This talk will start with a brief discussion of SQL Injection and Blind SQL Injection. It will then segue into a discussion of how BBQSQL can be useful in exploiting these vulnerabilities. This talk will cover how features like evented concurrency and character frequency based searching can greatly improve the performance of a SQL Injection tool. This talk should leave you with enough knowledge to begin using BBQSQL to simplify and speed up your application pentests.

Presenters:

• Ben Toews - Security Consultant, Neohapsis
  Ben Toews is a Security Consultant at Neohapsis where he specializes in application and network pentesting. Previously, Ben has worked as a sysadmin and as a developer. Ben has spoken at Thotcon 0x03 and has been published in HITB Magazine. Ben has a BS in Information Assurance and Security Engineering from DePaul University. Twitter: @mastahyeti http://btoe.ws
• Scott Behrens - Security Consultant, Neohapsis
  Scott Behrens is currently employed as a Security Consultant at Neohapsis and an Adjunct Professor at DePaul University. Before Neohapsis, Scott Behrens was an Open Systems Architect for a financial consulting firm, as well as a Network Administrator at Argonne National Laboratories. Scott Behrens' expertise lies in software security assessment, network penetration testing, social engineering, security architecture, and security research. Scott is also the co-developer of NeoPI, a framework to aid in the detection of obfuscated malware. Scott has also presented at Chicago B-sides and has published numerous articles in various security outlets. Scott Behrens has an MS in Network Security from DePaul University. Twitter: @HelloArbit http://www.scottbehrens.com

Links:

• https://defcon.org/html/defcon-20/dc-20-speakers.html#Toews
• https://infocon.org/cons/DEF CON/DEF CON 20/DEF CON 20 video and slides/DEF CON 20 - Ben Toews and Scott Behrens - Rapid Blind SQL Injection Exploitation with BBQSQL - Video and Slides.mp4 (Video and Slides)
• https://www.youtube.com/watch?v=4alS2_JLEGc

Similar Presentations:

• DEF CON 12 (2004) / Blind SQL Injection Automation Techniques
• ShmooCon I (2005) / Automated Blind SQL Exploitation
• DerbyCon 2.0 Reunion (2012) / Rapid Blind SQL Injection Exploitation with BBQSQL