Questions tagged [sql-injection]
An attack where malicious SQL statements are provided as input data, exploiting security vulnerabilities in the client. This allows an attacker to bypass authentication and access controls.
9
questions
0
votes
0answers
15 views
What is the concept of HTML Injection- Reflected URL and how it works?
I tried it with burpsuite on a website url but I'm not able to understand what should be the expected result of this?
For ex-
Enter the url - wwww.google.com on the burpsuite browser
Now, once I ...
0
votes
0answers
21 views
Are there any open source libraries that do automatic sql injection tests via configurable vectors?
I need to test an endpoint in our system for sql injection. I would like to point an off the shelf injection utility at it, but the suspected attack vector is definitely non-standard. Are there any ...
0
votes
1answer
46 views
Security test for .net desktop application: upload a file (shell) to check how software behaves
I am looking for a most common injection file (shell) to import my software to check if it is open to these kind of attacks or not. Any recommendation, web sites or blogs?
(summary: i will upload ...
1
vote
2answers
969 views
JMeter - Pass http response values to jdbc request without using xpath extractor?
I'm using JMeter and I need to get the value of <productid> from an Http API response (productid = 001)[see Http API response screenshot] and pass it to a jdbc request [see JDBC request ...
0
votes
1answer
103 views
Need SQL Injection Document? [duplicate]
i am trying to study SQL Injection nowadays & i am searching for good tutorial .
any recommendation for written or videos tutorial ?
4
votes
2answers
3k views
How do I test injection attacks similar to SQL injection for non sql solutions, or do I?
My team is testing some products where we have forgone SQL as the back-end. This means that we have stopped executing any security tests around SQL injection. I have this nagging suspicion that ...
5
votes
2answers
574 views
Netsparker community edition: how to start with it?
I like to do SQL injection security testing. So I installed Netsparker (community edition 1.7). If any one have used this application to test SQL injection an web applications, then please tell me the ...
8
votes
7answers
497 views
Learning about Ethical Hacking
I'm in the process of trying to learn more about ethical hacking, however a lot of the sources I am reading about have a lot of text/theory with very little hands on work. I was wondering if anyone ...
17
votes
4answers
10k views
How do I test an application for SQL injections?
I'm supposed to test a web application for SQL injections. I'm new to this type of security testing and I'd like to get some tips on the matter. Are there any best practices or do I simply search on ...
