SQL Injection

A nice way to check for this vulnerability is to input a quote and see if something goes wrong.

SQL injection can be used to bypass login, but it can also be used to gather information. Of the things you can discover:

  • The data itself.

  • Enumerate other tables.

  • Amount of rows and columns.

  • The version of the DB.

  • The user that runs the queries

Notes

Some DBs are configured to be able to interact with the OS! You can load and write to files.

The code may expect one query, so when injecting queries a LIMIT can be added.

PreviousFile InclusionNextLinux Tricks

Last updated