千里之堤，溃于蚁穴——揭密SQL注入攻击——初识SQL注入

大家也许都听说过SOL Injection(SOL注入)攻击。然而除了简单地使用傻瓜式的自动注入工具外，你对SOL Injection到底了解多少?本期“黑客防线”栏目将为大家揭开SOL Injection的面纱，一步一步深入SOL注入攻击。

SQL Injection Defense Mechanisms for IIS＋ASP＋MSSQL Web Applications

With the sharp increase of hacking attacks over the last couple of years, web application security has become a key concern. SQL injection is one of the most common types of web hacking and has been widely written and used in the wild. This paper analyzes the principle of SQL injection attacks on Web sites, presents methods available to prevent IIS ＋ ASP ＋ MSSQL web applications from these kinds of attacks, including secure coding within the web application, proper database configuration, deployment of IIS. The result is verified by WVS report.

菜鸟玩注入精品——NBSI2

NBSI2是网站ASP注入漏洞检测工具，特别在SQL Server注入检测方面有极高的准确率，该工具是由NB联盟小竹开发的一款价值1000RMB的超级分析器，可以帮助不懂SQL语句的朋友进行SQL注入。当然，对菜鸟朋友来说，熟悉的掌握这样的NB工具也是一个非常不错的选择！下面我们就带领广大菜鸟朋友们以一个实际的站点为例子，给菜鸟朋友们实际讲解各功能是如何实现的。