Chris Anley
More info
- Affiliation
- NGSSoftware, NCC Group
- Known for
- Advanced SQL Injection (2002), The Shellcoder's Handbook
British security researcher whose 2002 paper turned SQL injection from a curiosity into a standard tool.
"Advanced SQL Injection in SQL Server Applications" (2002) worked methodically through what an attacker can do once user input is pasted straight into a query: extract tables through error messages, stack multiple statements, run commands on the server. Much of what is taught about SQL injection today traces back to it, and a follow-up paper showed how to pull data out even when no errors are visible.
Anley worked at NGSSoftware, the firm where David Litchfield found holes in Oracle and SQL Server at a steady clip, and stayed on when it became part of NCC Group. He co-wrote The Shellcoder's Handbook, which also bears Felix Lindner's name on the cover.