Trending on TikTok

Buldak

Sunscreen

Sanrio

English

{{sellerTotalView > 1 ? __("sellers", {number: sellerTotalView}) : __("seller", {number: sellerTotalView}) }}, {{numTotalView > 1 ? __("items", {number: numTotalView}) : __("item", {number: numTotalView}) }}

View Cart & Check Out

Nickname

Let us know how to properly address you.

Update Your Name

xxxxxxx@yamibuy.com

Account Orders Favorites

Points 0

Coupons 0

Gift Card Balance $0.00

Sign Out

Change Your Zip Code

Inventory information and delivery speeds may vary for different locations.

Location History

We will notify you by email when the item back in stock.

Your email: {{remindEmail}}

Cancel

Jingdong book

安全技术经典译丛：SQL注入攻击与防御（第2版）

View Cart & Check Out

{{buttonTypePin == 3 ? __("Scan to view more PinGo") : __("Scan to start")}}

Books Computers & Internet Database

Jingdong book

安全技术经典译丛：SQL注入攻击与防御（第2版）

Name: 安全技术经典译丛：SQL注入攻击与防御（第2版）
Brand: Jingdong book
SKU: 3118023001
Price: 47.20 USD
Availability: OutOfStock

{{__(":people-members", {'people': item.limit_people_count})}} {{ itemCurrency }}{{ item.valid_price }} {{ itemCurrency }}{{ item.invalid_price }} {{ itemDiscount }}

Ends in

{{ itemCurrency }}{{ priceFormat(item.valid_price / item.bundle_specification) }}/{{ item.unit }}

{{ itemCurrency }}{{ item.valid_price }} {{ itemCurrency }}{{ priceFormat(item.valid_price / item.bundle_specification) }}/{{ item.unit }} {{ itemCurrency }}{{ item.invalid_price }} {{itemDiscount}}

Sale ends in

Sale will starts after Sale ends in

{{ __( "Pay with Gift Card to get sale price: :itemCurrency:price", { 'itemCurrency' : itemCurrency, 'price' : (item.giftcard_price ? priceFormat(item.giftcard_price) : '0.00') } ) }} ({{ itemCurrency }}{{ priceFormat(item.giftcard_price / item.bundle_specification) }}/{{ item.unit }}) Details

Best before

Currently unavailable.

We don't know when or if this item will be back in stock.

Unavailable in your area.

Sold Out

Details

Full product details

Editer Recommend

理解、发现、利用和防御SQL注入攻击的参考
融入的SQL注入研究成果，涵盖丰富的示例和详尽分析
适用于Oracle、SQL Server、MySQL、PostgreSQL等数据库平台

Content Description

SQL注入攻击是一种已经长期存在，但近年来日益增长的安全威胁，《安全技术经典译丛：SQL注入攻击与防御（第2版）》致力于深入探讨SQL注入问题。
《安全技术经典译丛：SQL注入攻击与防御（第2版）》前一版荣获2009Bejtlich图书奖，第2版对内容做了全面更新，融入了一些的研究成果，包括如何在移动设备上利用SQL注入漏洞，以及客户端SQL注入等。
《安全技术经典译丛：SQL注入攻击与防御（第2版）》由一批SQL注入专家编写，他们对Oracle、SQLServer、MySQL和PostgreSQL数据库平台的SQL注入问题具有独到的见解。
主要内容：
·发现、确认和自动发现SQL注入漏洞
·通过SQL注入利用漏洞
·在代码中发现SQL注入的方法和技巧
·利用操作系统的漏洞
·在代码层和平台层防御SQL注入攻击
·确定是否已经遭到SQL注入攻击

Author Description

克拉克（Justin Clarke），Gotham Digital Science公司的共同创办人和总监，Gotham Digital Science是一家安全顾问公司，为客户提供识别、预防和管理安全风险的服务。在网络安全测试和软件领域，他有15年以上的工作经验。他还为美国、英国和新西兰等地的大型金融、零售和技术客户提供软件服务。
Justin是很多计算机安全书籍的特约撰稿人，也是很多安全会议的演讲嘉宾和项目研究者，包括Black Hat、EuSec West、OSCON、ISACA、RSA、SANS、OWASP和British Computer Society.他是开源的SQL盲注漏洞利用工具SQL Brute的作者，还是OWASP在伦敦地区的负责人。
Justin具有新西兰Canterbury大学计算机科学学士学位，还具有战略人力资源管理与会计（Strategic Human Resources Management and Accounting）专业的研究生文凭。或许这些学位对他都很有用。

Catalogue

第1章什么是SQL注入
1.1 概述
1.2 理解Web应用的工作原理
1.2.1 一种简单的应用架构
1.2.2 一种较复杂的架构
1.3 理解SQL注入
1.4 理解SQL注入的产生过程
1.4.1 构造动态字符串
1.4.2 不安全的数据库配置
1.5 本章小结
1.6 快速解决方案
1.7 常见问题解答

第2章 SQL注入测试
2.1 概述
2.2 寻找SQL注入
2.2.1 借助推理进行测试
2.2.2 数据库错误
2.2.3 应用程序的响应
2.2.4 SQL盲注
2.3 确认SQL注入
2.3.1 区分数字和字符串
2.3.2 内联SQL注入
2.3.3 终止式SQL注入
2.3.4 时间延迟
2.4 自动寻找SQL注入
2.5 本章小结
2.6 快速解决方案
2.7 常见问题解答

第3章复查代码中的SQL注入
3.1 概述
3.2 复查源代码中的SQL注入
3.2.1 危险的编码行为
3.2.2 危险的函数
3.2.3 跟踪数据
3.2.4 复查Android应用程序代码
3.2.5 复查PL/SQL和T-SQL代碣
3.3 自动复查源代码
3.3.1 Graudit
3.3.2 YASCA
3.3.3 Pixy
3.3.4 AppCodeScan
3.3.5 0WASPLAPSE+项目
3.3.6 Microsofi SQL注入源代码分析器
3.3.7 CAT.NET
3.3.8 RIPS-PHP脚本漏洞的静态源代码分析器
3.3.9 CodePro AnalytiX
3.3.10 Teachable Static Analysis Wbrkbench
3.3.11 商业源代码复查工具
3.3.12 Fortify源代码分析器
3.3.13 RationaI AppScan Source Edition
3.3.14 CodeSecure
3.3.15 Klocwork Solo
3.4 本章小结
3.5 快速解决方案
3.6 常见问题解答

第4章利用SQL注入
4.1 概述
4.2 理解常见的漏洞利用技术
4.2.1 使用堆叠查询
4.2.2 在Web应用程序中利用Oracle漏洞
4.3 识别数据库
4.3.1 非盲跟踪
4.3.2 盲跟踪
4.4 使用UINON语句提取数据
4.4.1 匹配列
4.4.2 匹配数据类型
4.5 使用条件语句
4.5.1 方法1：基于时间
4.5.2 方法2：基于错误
4.5.3 方法3：基于内容
4.5.4 处理字符串
4.5.5 扩展攻击
4.5.6 利用SQL注入错误
4.5.7 0racle中的错误消息
4.6 枚举数据库模式
4.6.1 SQL Server
4.6.2 MySQL
4.6.3 PostgreSQL
4.6.4 0raCle
4.7 在INSERT查询中实施注入攻击
4.7.1 第一种情形：插入用户规定的数据
4.7.2 第二种情形：生成INSERT错误
4.7.3 其他情形
4.8 提升权限
4.8.1 SQL Server
4.8.2 在未打补丁的服务器上提升权限
4.8.3 SYS.DBMS_CDC_PUBLISH
4.9 窃取哈希口令
4.9.1 SQL Server
4.9.2 MySQL
4.9.3 PostgreSQL
4.9.4 0mCle
4.10 带外通信
4.10.1 e.mail
4.10.2 HTTP/DNS
4.10.3 文件系统
4.11 自动利用SQL注入
4.11.1 Sqlmap
4.11.2 BobCat
4.11.3 BSQL
4.11.4 其他工具
4.12 本章小结
4.13 快速解决方案
4.14 常见问题解答

第5章 SQL盲注利用
5.1 概述
5.2 寻找并确认SQL盲注
5.2.1 强制产生通用错误
5.2.2 注入带副作用的查询
5.2.3 拆分与平衡
5.2.4 常见的SQL盲注场景
5.2.5 SQL盲注技术
5.3 使用基于时间的技术
5.3.1 延迟数据库查询
5.3.2 基于时间的推断应考虑的问题
5.4 使用基于响应的技术
5.4.1 MySQL响应技术
5.4.2 PostgreSQL响应技术
5.4.3 SQL Server响应技术
5.4.4 Oracle响应技术
5.4.5 返回多位信息
5.5 使用非主流通道
5.5.1 数据库连接
5.5.2 DNS渗漏
5.5.3 e-mail渗漏
5.5.4 HTTP渗漏
5.5.5 ICMP渗漏
5.6 自动SQL盲注利用
5.6.1 AbSintlle
5.6.2 BSQL Hacker
5.6.3 SQLBrute
5.6.4 Sqlmap
5.6.5 Sqlninja
5.6.6 Squeeza
5.7 本章小结
5.8 快速解决方案
5.9 常见问题解答

第6章利用操作系统
第7章高级话题
第8章代码层防御
第9章平台层防御
第10章确认并从SQL注入攻击中恢复
第11章参考资料

Introduction

自从2009年本书第1版出版以来又过去了不少时间，大约经过了3年之后，本书的第2版也已经面世。当我们在第1版中讨论SQL注入的理念时，SQL注入已经出现了10多年，并且在本质上并没有新的改变。截至2008年（大约在发现SQL注入这一问题10年之后，当本书第1版刚开始成形时），对于什么是SQL注入、如何发现SQL注入漏洞，以及如何利用漏洞，人们依然没有综合性的理解，更不用说如何防御SQL注入漏洞，以及如何从一开始就避免SQL注入漏洞的出现。另外，普通的观点是SQL注入仅仅与Web应用程序有关，对于混合攻击或者作为一种渗透组织机构外部安全控制的方法而言，SQL注入并不是一种危险因素——事实充分证明这种观点是错误的，在本书第1版付梓前后发生的黑客安全事件就是最好的说明（比如Heartland Payment Systems的安全事件）。
现在是2012年，笔者完成了本书的第2版，虽然在SQL注入的基础理论上只有很小的变化，但是SQL注入的技术已经不断进步，在将SQL注入应用于较新的领域方面已经有了新的发展，比如将SQL注入应用于移动应用程序，以及通过HTML5实现客户端SQL注入。另外，此书第2版还为我和本书的合著者提供了一次机会，对读者在第1版中提出的问题提供反馈。在第2版中，不但全面更新了本书的所有内容，还介绍了一些新的技术和方法。另外在第2版中还扩大了数据库的范围，包含对Postgre SQL数据库的介绍。在本书的各个章节中，都将Microsoft SQL Server、Oracle、My SQL和Postgre SQL数据库作为主要的数据库平台，并在相关内容中使用Java、.NET和PHP编写了代码示例。
本书总体上分为4个部分——理解SQL注入（第1章）、发现SQL注入（第2～3章）、利用SQL注入漏洞（第4～7章），以及防御SQL注入（第8章～10章）。每一部分都有意针对不同的读者，从所有读者（理解SQL注入）、安全专家和渗透测试人员（发现和利用SQL注入漏洞），到管理数据库的开发专家和IT专家（发现和防御SQL注入）。为了使本书的内容更丰富，包含了第11章以提供参考资料，该章还包含了本书并未详细介绍的其他数据库平台。如果偶然遇到这样的平台，读者可以参考本书前面章节中讨论的各种技术。

Specifications

Brand

Jingdong book

Brand Origin

China

Disclaimer

Product packaging, specifications and price are subject to change without notice. All information about the products on our website is provided for information purposes only. Please always read labels, warnings and directions provided with the product before use.

View Full Terms of Use

Scan to Share

Add to favorites

{{ $isZh ? coupon.coupon_name_sub : coupon.coupon_ename_sub | formatCurrency }}

Clip coupons

Quantity

{{buttonTypePin == 3 ? __("Scan to view more PinGo") : __("Scan to start")}}

Sold by JD@CHINA

Ship to

Free shipping over 69

Genuine guarantee

View details

Region

Added to Cart

Keep Shopping

More to Consider

Coupons

Clip Clipped Over

Expires soon {{ formatTime(coupon.use_end_time) }}

Share this item with friends

Cancel

Yami Gift Card

Get this exclusive deal when paying with gift card

Terms and Conditions

Gift card deals are special offers for selected products;

The gift card deals will automatically be activated if a customer uses gift card balance at check out and the balance is sufficient to pay for the total price of the shopping cart products with gift card deals;

You will not be able to activate the gift card deals if you choose other payment methods besides gift card. The products will be purchased at their normal prices;

If your account balance is not enough to pay for the products with gift card deals, you can choose to reload your gift card balance by clicking on the Reload button at either shopping cart page or check out page;

Products that have gift card deals can be recognized by a special symbol showing 'GC Deal';

For any additional questions or concerns, please contact our customer service;

Yamibuy reserves the right of final interpretation.

Sold by Yami

Service Guarantee

Free Shipping over $49

Easy Returns

Ships from United States

Shipping

United States

Standard Shipping is $5.99 (Excluding Alaska & Hawaii). Free on orders of $49 or more.

Local Express is $5.99 (Available in Parts of CA, NJ, MA & PA). Free on orders of $49 or more.

2-Day Express (Includes Alaska & Hawaii) starts at $19.99.

Return Policy

Yami is committed to provide our customers with a peace of mind when purchasing from us. Most items shipped from Yamibuy.com can be returned within 30 days of receipt of shipment (For Food, Beverages, Snacks, Dry Goods, Health supplements, Fresh Grocery and Perishables Goods, within 7 days of receipt of shipment due to damages or quality issues; To ensure that every customer receives safe and high-quality products, we do not provide refunds or returns for beauty products once they have been opened or used, except in the case of quality issues; Some products may have different policies or requirements associated with them, please see below for products under special categories, or contact Yami Customer Service for further assistance).
Thank you for your understanding and support.

Learn More

Sold by Yami

Terms and Conditions of Yami E-Gift Card

If you choose “Redeem automatically” as your delivery method, your gift card balance will be reload automatically after your order has been processed successfully;

If you choose “Send to Email”as your delivery method, the card number and CVV will be sent to the email address automatically;

Any user can use the card number and CVV to redeem the gift card, please keep your gift card information safely. If you have any trouble receiving email, please contact Yami customer service;

Yami gift card can be used to purchase both Yami owned or Marketplace products;

Yami gift card will never expire;

Yami gift card balance does not have to be used up at once;

Return Policy

Gift card that has already been consumed is non-refundable.

Sold by JD@CHINA

Fulfilled by Yami

Service Guarantee

Free Shipping over $49

Easy Returns

Ships from United States

Shipping

United States

Standard Shipping is $5.99 (Excluding Alaska & Hawaii). Free on orders of $49 or more.

Local Express is $5.99 (Available in Parts of CA, NJ, MA & PA). Free on orders of $49 or more.

2-Day Express (Includes Alaska & Hawaii) starts at $19.99.

Return Policy

You may return product within 30 days upon receiving the product. Items returned must be new in it's original packing, including the original invoice for the purchase. Customer return product at their own expense.

Sold by JD@CHINA

Yami-China FC

Service Guarantee

Cross-store Free Shipping over $69

30-days Return

Yami-China FC

Yami has a consolidation warehouse in China which collects multiple sellers’ packages and combines to one order. Our Yami consolidation warehouse will directly ship the packages to your door. Cross-store free shipping over $69.

Return Policy

You may return products within 30 days upon receiving the products. Sellers take responsibilities for any wrong shipment or missing items. Packing needs to be unopened for any other than quality issues return. We promise to pack carefully, but because goods are taking long journey to destinations, simple damages to packaging may occur. Any damages not causing internal goods quality problems are not allowed to return. If you open the package and any quality problem is found, please contact customer service within three days after receipt of goods.

Shipping Information

Yami Consolidation Service Shipping Fee $9.99(Free shipping over $69)

Sellers in China will ship their orders within 1-2 business days once the order is placed. Packages are sent to our consolidation warehouse in China and combined there. Our Yami consolidation warehouse will directly ship the packages to you via UPS. The average time for UPS to ship from China to the United States is about 10 working days and it can be traced using the tracking number. Due to the pandemic, the delivery time may be delayed by about 5 days. The package needs to be signed by the guest. If the receipt is not signed, the customer shall bear the risk of loss of the package.

Sold by JD@CHINA

Service Guarantee

Free shipping over 69

Genuine guarantee

Shipping

Yami Consolidated Shipping $9.99(Free shipping over $69)

Seller will ship the orders within 1-2 business days. The logistics time limit is expected to be 7-15 working days. In case of customs clearance, the delivery time will be extended by 3-7 days. The final receipt date is subject to the information of the postal company.

Yami Points information

All items are excluding from any promotion or points events on Yamibuy.com

Return Policy

Download the Yami App

Feedback

Back Top

Reviews{{'('+ commentList.posts_count + ')'}}

Have your say. Be the first to help other guests.

Write a review

{{i}} star

{{i}} stars

{{ parseInt(commentRatingList[i]) }}%

{{ showTranslate(comment) }}Show Less

{{ strLimit(comment,800) }}Show more

Show Original

Show All

{{ formatTime(comment.in_dtm) }} VERIFIED PURCHASE {{groupData}}

{{ comment.likes_count }} {{ comment.likes_count }} {{ comment.reply_count }} {{comment.in_user==uid ? __('Delete') : __('Report')}}

{{ showTranslate(comment) }}Show Less

{{ strLimit(comment,800) }}Show more

Show Original

Show All

{{ formatTime(comment.in_dtm) }} VERIFIED PURCHASE {{groupData}}

{{ comment.likes_count }} {{ comment.likes_count }} {{ comment.reply_count }} {{comment.in_user==uid ? __('Delete') : __('Report')}}

No related comment~

Load more reviews

Review

{{ showTranslate(commentDetails) }}Show Less

{{ strLimit(commentDetails,800) }}Show more

Show Original

Show All

{{ formatTime(commentDetails.in_dtm) }} VERIFIED PURCHASE {{groupData}}

Please write at least one word

Comments{{'(' + replyList.length + ')'}}