SQL_INJECTION TESTING AND SECURING DATABASE

MANUAL CHECKS

THIS IS AN ERROR RETURNED AFTER USING THE MANUAL AUTHENTICATION FILE TO CHECK WHETHER A DATABASE IS SECURE

THIS MEANS THE DATABASE IS NOT SECURE

TOOL CHECKS

-STEP 1

You need OWASP WebGoat listening on port 8080. You also need either OWASP Zap or Burp Suite properly configured with your Web Browser.

-STEP 2

Download Sqlmap. Sqlmap an open source penetration testing tool. Navigate to its folder on cmd Run Sqlmap.py sqlmap –wizard Run your post and get queries that can cause a security risk

TOOL CHECKS

Use netsparker