Collected research
SQL Injections by Truncation
Bala Neerumalla's Black Hat USA 2006 deck on SQL truncation. Where a column is shorter than the input a form accepts, an over-long value is silently cut to length, so a crafted registration can collide with an existing account after truncation and take it over. The deck walks the technique through SQL Server sessions and covers modification as well as injection.
Record
- Researcher
- Bala Neerumalla
- Published by
- blackhat.com
- Format
- Whitepaper
- Topic
- Injection
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Bala Neerumalla, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .