2025 - SQL injection is a thing of the past… and other lies we tell ourselves
2025 - SQL injection is a thing of the past… and other lies we tell ourselves.
Summary
Overview: [Music] All right. Well, I think we can get uh get started. So obviously today I do a little bit of talk about SQL injection and uh kind of other injection style attacks. This talk this presentation kind of came about uh one day I was kind of sitting around I had access to all this great data that I never had access to before and I wanted to know does like are we still doing SQL injection uh 30 years since kind of we first discovered it. uh and I was very shocked to see that yes, we are very muc
Key Topics: h still suffering from SQL injection and it hasn't gotten much better over those periods. So that kind of led me down
Related talks
Black Hat·36 min
Qi Deng · Bo Qu · Tao Yan
Security researchers examine technical aspects of Give Me a SQL Injection, I Shall PWN IIS and SQL Server.
Black Hat·53 min
Esteban Martínez Fayó
Engineers explore architecture and security mechanisms for USA 2005 - Advanced SQL Injection in Oracle Databases.
Black Hat·45 min
Zachary Cutlip
Analysts investigate attack surfaces and defenses concerning USA 2012 - SQL Injection to MIPS Overflows: Rooting SOHO Routers.