I need to test an endpoint in our system for sql injection. I would like to point an off the shelf injection utility at it, but the suspected attack vector is definitely non-standard. Are there any libraries, preferably c# that I could use? I'm looking for something that could ideally take a partial sql string and inject attacks into it. Most utilities I know test injection via url manipulation in http queries, but that's not gonna work in my case.
1
-
You will get owasp cheetsheet that contains sal injection fuzz data , right logic to parse the file n use that content . – PDHide Jun 5 '20 at 3:34
Add a comment
|
