Hacking SQL Injection for Remote Code Execution on a LAMP.pdf

(1081 KB) Pobierz

Hacking SQL Injection for Remote

Code Execution on a LAMP stack.

Lance Buttars aka Nemus

Updated Slides @

https://www.introtobackdoors.com

Who am I?

Just some guy who likes computer security.

Twitter

@Nemus801

I work as a PHP/Python application programmer.

I am a member of the local

Defcon Group

www.dc801.org

Freenode #dc801.

I help organize and run 801 Labs which is a hackerspace

located in downtown Salt Lake City.

801 Labs Hacker Space

www.801labs.org

Websecurity Warriors Podcast

http://websecuritywarriors.com/

Prerequisites

●

Familiarity with Linux, Apache, MySQL, PHP (LAMP).

○ Linux Operating Systems CLI

○ SQL Databases and Basic SQL

■

http://www.w3schools.com/sql/sql_intro.asp

○ Apache Servers.

○ Basic PHP knowledge.

○ Understanding of HTTP POST and GET

■

http://www.w3schools.com/tags/ref_httpmethods.asp

●

LAMP Setup

○

https://www.digitalocean.

com/community/tutorials/how-to-install-linux-apache-

mysql-php-lamp-stack-on-ubuntu