SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level
summary
Examines how attackers can bypass prepared-statement protections by abusing database wire protocols (binary drivers) to 'smuggle' full SQL/NoSQL statements into an application's DB connection. Uses vulnerable database driver libraries as case studies and adapts HTTP request-smuggling concepts to corrupt message boundaries, causing desynchronization that enables authentication bypass, data leakage, and remote code execution.
AI-written summary · about
related talks
24mSQL injection - What is it and how do I prevent it?
54mTaking on the King: Killing Injection Vulnerabilities
49mBlended Web and Database Attacks on Real-time, In-Memory Platforms
36mGive Me a SQL Injection, I Shall PWN IIS and SQL Server
23m{JS-ON: Security-OFF}: Abusing JSON-Based SQL Queries
22mSecure Your Code — Injections and Logging
56mBlended Web and Database Attacks on Real-Time, In-Memory Platforms
26mWill it inject? A look at SQL injection and ActiveRecord