Writing · Tag

Posts tagged owasp

1 post .

SQL injection — engagement methodology

26 September 2011

The piece I have been promising the engagements team since January. The five places SQLi shows up, the structural answers, and why the WAF is not actually a defence.

engagements methodology modsecurity owasp pen-testing sql-injection sqlmap