Archive of SQL Injection Test
-
Determining Query Structure
Posted in SQL Injection TestUnderstanding how to craft a malicious SQL segment. One of the main tasks of a penetration tester is to figure out what is the original query structure. This precious piece of information will allow him to take control over the main query with a specially crafted SQL segment...
Continue reading this entry → -
SQL Injection Detection
Posted in SQL Injection TestDetect potential SQL injection vulnerabilities. The first step towards achieving a successful SQL injection attack is to detect vulnerabilities. Of course, some tools can automate the process, but it’s better to understand how detection can be done manually. In addition, there are some situations where...
Continue reading this entry → -
Identify Data Entries for SQL Injection Attacks
Posted in SQL Injection TestWhere SQL injection vulnerabilities could be found. First and foremost, the tester will need to identify data entries before attempting an attack. Despite the fact that SQL injection is among today's most popular security issues, all fields are not necessary vulnerable. For this reason, you must be...
Continue reading this entry →