4 ms·
Is there any example of SQL injections that worked IRL ? That's so funny.
by Toine 8y ago
Is there any example of SQL injections that worked IRL ? That's so funny.
- s3m4j 8y agoWhat do you mean by "IRL" ? SQL injections work every day, I think it's still the number one in the OWASP top 10.
- rocqua 8y agoMy wifi name is a drop_table NETWORKS injection. Never heard of it affecting anything though.
- pizzeys 8y agoTry making it an XSS payload - that one often works ;)
- roywiggins 8y agoThere's the stories of people named Null that make various systems crash or reject them, probably because they coerce to strings before checking for a "null" value.
- littlestymaar 8y agoI had a classmate named «Faux» (which means “false” in French) and it caused many bugs with Excels spreadsheets in our school.
- Noumenon72 8y agoJust having those Unicode characters in his name is bad enough!
- cpeterso 8y agoThe Twitter account "Ominous Null" shares real-life examples of systems mishandling null values: https://twitter.com/ominous_null/ https://twitter.com/ominous_null/
- ashleyn 8y agoI once read a story on Reddit about a payroll processor with an utterly unholy mess of a system. One day, they get a customer called "Select", and the entire system stopped working.
- Nullabillity 8y agoThis isn't SQL, but HP printers' settings protocol uses XML and doesn't escape Wi-Fi SSIDs, so it breaks completely whenever any nearby SSID includes < or >. Which wouldn't be a massive problem, except for that Com Hem (our Comcast) has set their default SSID to COMHEM<(start of router MAC)>.
- tscs37 8y agoNot SQL but I once set my Wifi hotspot to "NULL" in the lecture hall and someone started complaining that their phone was crashing constantly. The sheer number of devices that have these kinds of vulnerabilities is simply insane.