Time-Based SQL Injection Techniques and Defense Strategies

Time-Based SQL Injection Techniques and Defense Strategies

Dive into a 25-minute conference talk from DEF CON 32 that examines time-based SQL injection techniques through the detailed analysis of Operation GhostShell. Learn how attackers leverage time delays for data extraction, with specific focus on real-world breaches affecting major universities. Witness live demonstrations of these sophisticated attack methods while gaining comprehensive insights into the technical mechanics of time-based SQLi. Master defensive strategies and countermeasures to protect systems against these vulnerabilities, making this essential viewing for security professionals and penetration testers looking to strengthen their understanding of advanced SQL injection techniques.