Gathering Information - SQL Injection

Archive of Gathering Information

Database Fingerprinting for SQL Injection
Posted in Gathering Information
Identifying the underlying DBMS. There are small differences between database management systems and those can have a huge impact on the feasibility and the result of an SQL injection attack. It is especially important for the attacker to identify the underlying DBMS since it...
Continue reading this entry →
Find Table Names for SQL Injection
Posted in Gathering Information
Extracting table names to achieve SQL injection. Before building a query to extract sensitive information, the attacker must know what data he wants to extract and where it is stored in the database. This article explains how to show table names. To simplify learning, we suppose that...
Continue reading this entry →
Find Column Names for SQL Injection
Posted in Gathering Information
Extracting column names for a given table. Once the attacker knows table names he needs to find out what the column names are in order to extract information. This article explains how this information can be found using meta data...
Continue reading this entry →

About

Sqlinjection.net was developed to provide information about SQL injection to students, IT professionals and computer security enthusiasts. It intends to be a reference about this security flaw.
Read more

Disclamer

This website and/or it's owner is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to sqlinjection.net.