SQL Injection In this section, we'll explain what SQL injection is, describe some common examples, explain how to find and exploit various kinds of SQL injection vulnerabilities, and summarize how to prevent SQL injection.
-
What is SQL injection (SQLi)?
-
SQL Injection Types and Description
-
SQL Injection Vulnerability Scanner Tool’s: • SQLMap – Automatic SQL Injection And Database Takeover Tool • jSQL Injection – Java Tool For Automatic SQL Database Injection • BBQSQL – A Blind SQL-Injection Exploitation Tool • NoSQLMap – Automated NoSQL Database Pwnage • Whitewidow – SQL Vulnerability Scanner • DSSS – Damn Small SQLi Scanner • explo – Human And Machine Readable Web Vulnerability Testing Format • Blind-Sql-Bitshifting – Blind SQL-Injection via Bitshifting • Leviathan – Wide Range Mass Audit Toolkit • Blisqy – Exploit Time-based blind-SQL-injection in HTTP-Headers (MySQL/MariaDB)
-
Payloads
-
finding Injection Points
