Advanced SQL Injection In SQL Server Applications

Table of contents :
[Abstract]……Page 2
[Introduction]……Page 3
[Obtaining Information Using Error Messages]……Page 7
[xp_cmdshell]……Page 12
[Other Extended Stored Procedures]……Page 13
[Custom extended stored procedures]……Page 14
[ActiveX automation scripts in SQL Server]……Page 15
[Stored Procedures]……Page 17
[Second-Order SQL Injection]……Page 18
[Length Limits]……Page 20
[Input Validation]……Page 21
[SQL Server Lockdown]……Page 23
[References]……Page 24
(sqlcrack.sql)……Page 25