OpenX vulnerability scan with Acunetix Web Vulnerability Scanner

A demonstration showing how an automated tool (Acunetix WVS with Acusensor) was used to detect a blind SQL injection vulnerability in the popular package OpenX. It also shows to verify the blind SQL injection manually. Finally it illustrates how an attacker may make use of such security issues to extract sensitive information such as password hashes from the database.

Sandro Gauci is the owner and Founder of EnableSecurity (www.enablesecurity.com) where he performs R&D and security consultancy for mid-sized companies. Sandro has over 8 years experience in the security industry and is focused on analysis of security challenges and providing solutions to such threats. His passion is vulnerability research and has previously worked together with various vendors such as Microsoft and Sun to fix security holes.

Sandro is the author of the free VoIP security scanning suite SIPVicious (sipvicious.org) and VOIPPACK for CANVAS.