Web - Server
Saturday 28 April 2018, 18:52 #1
Web - Server SQL Truncation
This one had me puzzled for a moment but that is basically because the attached document isn’t really helping you (I think).
Truncation is actually really easy to exploit and if you’ve ever worked seriously with sql-server you need to dig in your mind and remember that time you tried to execute dynamic sql which in some cases rendered beyond the varchar-limit of 4000 characters.
Now, the hint, just watch this video: https://www.youtube.com/watch?v=F1Tm4b57ors
cheers, have fun!