How To Rob An Online Bank And Get Away With It - Acros Security

More documents

Recommendations

Info

ACROS PUBLIC Page 28SOURCE Boston 2012SQL Injection – Data Theft“SELECT rate FROM exch_ratesWHERE currency = ‘”.$currency.”’”“SELECT rate FROM exch_ratesWHERE currency = ‘’ UNIONSELECT balance FROM accountsWHERE account_id = ‘887296’”
ACROS PUBLIC Page 29SOURCE Boston 2012SQL Injection – Messing <strong>With</strong> Transactions“BEGIN TRANSACTION”“UPDATE accounts SET balance = 0WHERE account_id = ‘”.$acctid1.”’”“UPDATE accounts SET balance = 100WHERE account_id = ‘”.$acctid2.”’”“COMMIT TRANSACTION”
Page 1 and 2: ACROS PUBLIC© ACROSHow to Roban On
Page 3 and 4: ACROS PUBLIC Page 3SOURCE Boston 20
Page 27: ACROS PUBLIC Page 27SOURCE Boston 2
Page 47: ACROS PUBLIC Page 47SOURCE Boston 2

How To Rob An Online Bank And Get Away With It - Acros Security

Create successful ePaper yourself

Delete template?

Save as template?