I need to test an endpoint in our system for sql injection. I would like to point an off the shelf injection utility at it, but the suspected attack vector is definitely non-standard. Are there any libraries, preferably c# that I could use? I'm looking for something that could ideally take a partial sql string and inject attacks into it. Most utilities I know test injection via url manipulation in http queries, but that's not gonna work in my case.

  • You will get owasp cheetsheet that contains sal injection fuzz data , right logic to parse the file n use that content . – PDHide Jun 5 '20 at 3:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.