SQL Injection Attack Example

This will be a repository for a SQL Injection attack example for my information security class

Instructions for getting this set up on your machine:

• Install NodeJS and NPM from here
• Clone this repository
• Run npm install from your console in this directory
• Run node app.js to start the server
• Visit localhost:3000 to access the server

This will require a SQL database set up with the following information:

• host: "localhost"
• port: 3306
• user: "ExampleUser"
• password: "ExamplePassword"
• database: 'login'
• Tables 'user' and 'product'

Database Table Schemas

product table

• idproduct (INT11, Primary Key, Not Null)
• name (VARCHAR(45))
• price (DOUBLE)
• quantity (INT11)

user table

• iduser (INT11, Primary Key, Not Null)
• firstname (VARCHAR(45))
• lastname (VARCHAR(45))
• username (VARCHAR(45))
• ccnum (VARCHAR(45))
• address (VARCHAR(45))
• age (INT11)