The 20-minute simple SQL rootkit

Presented at ToorCon: Seattle 2013, July 6, 2013, 12:40 p.m. (20 minutes).

As Microsoft SQL Server has progressed, the security features and facilities have greatly matured. Unfortunately, the functionality of the service has also gone to great lengths to facilitate the programmability of the service by administrators and operators. This talk demonstrates how to use the latest version of SQL server and the default functionality of both SQL and Windows, to create, install, and hide a SQL service rootkit - all in 20 minutes.

Presenters:

• Rob Beck / whitey   as whitey
  Career pen-tester with a talent for breaking SQL - still hates being called, "The SQL guy."

Links:

• https://seattle.toorcon.net/2013/07/05/the-20-minute-sql/

Similar Presentations:

• THOTCON 0x8 (2017) / SQL Server Hacking on Scale using PowerShell
• ToorCon San Diego 14 (2012) / Microsoft SQL Server Post-Exploitation - When Databases Attack
• DEF CON 20 (2012) / SQL ReInjector - Automated Exfiltrated Data Identification