Questions tagged [sql-injection]

An attack where malicious SQL statements are provided as input data, exploiting security vulnerabilities in the client. This allows an attacker to bypass authentication and access controls.

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

Is there a method to perform sql inject for prepared statements?

I've been trying to learn sql injection and tried perform on a site that we developed. Following code is sample code taken from internet. I want to know is there a way to do sql injection even on a ...
0
votes
1answer
43 views

Security test for .net desktop application: upload a file (shell) to check how software behaves

I am looking for a most common injection file (shell) to import my software to check if it is open to these kind of attacks or not. Any recommendation, web sites or blogs? (summary: i will upload ...
1
vote
2answers
625 views

JMeter - Pass http response values to jdbc request without using xpath extractor?

I'm using JMeter and I need to get the value of <productid> from an Http API response (productid = 001)[see Http API response screenshot] and pass it to a jdbc request [see JDBC request ...
0
votes
1answer
97 views

Need SQL Injection Document? [duplicate]

i am trying to study SQL Injection nowadays & i am searching for good tutorial . any recommendation for written or videos tutorial ?
4
votes
2answers
2k views

How do I test injection attacks similar to SQL injection for non sql solutions, or do I?

My team is testing some products where we have forgone SQL as the back-end. This means that we have stopped executing any security tests around SQL injection. I have this nagging suspicion that ...
5
votes
2answers
563 views

Netsparker community edition: how to start with it?

I like to do SQL injection security testing. So I installed Netsparker (community edition 1.7). If any one have used this application to test SQL injection an web applications, then please tell me the ...
8
votes
7answers
482 views

Learning about Ethical Hacking

I'm in the process of trying to learn more about ethical hacking, however a lot of the sources I am reading about have a lot of text/theory with very little hands on work. I was wondering if anyone ...
16
votes
4answers
9k views

How do I test an application for SQL injections?

I'm supposed to test a web application for SQL injections. I'm new to this type of security testing and I'd like to get some tips on the matter. Are there any best practices or do I simply search on ...