Skip to main content

SQL Injection

SQL Injection

Many web applications take user input from a form so the user input is used literally in the construction of a SQL query submitted to a database. For example SELECT productdata FROM table WHERE productname = ‘user input product name’ so SQL injection attack involves placing SQL statements in the user input the SQL injection is the type of attack to get login acces from the any website without having password and user name the sql is a special-purpose programming language designed for managing data held in a relational database management systems (RDBMS) we can modifiy these data using sql injection we can also modifiy insert, query, update and delete, schema creation and modification, and data access control
training and certification

Other injection possibilities

Using SQL injections, attackers can:
  • Add new data to the database
  • Modify data currently in the database
  • Perform an UPDATE in the injected SQL
  • Often can gain access to other user’s system capabilities by obtaining their password

Comments

Post a Comment

Popular posts from this blog

Footprinting Scanning

Footprinting Scanning Sam Spade Download Sam Spade from this web site and install it. Sam Spade is a graphical tool which allows you to do DNS interrogation and many other things. See a tutorial here. The features which make Sam Spade a key security tool are: Advanced DNS – DIG tool requests all the DNS records for a host or domain Zone Transfer – ask a DNS server for all it knows about a domain SMTP Relay Check – check whether a mail server allows third party relaying Scan Addresses – scan a range of IP addresses looking for open ports Crawl Web site – search a Web site, looking for email addresses, offsite links, download a Web site Search IP block – finds the IP block for an organization Sam Spade also does whois, traceroute, finger and dns lookup. SuperScan Download SuperScan from its new location and install it. SuperScan allows you to scan a range of IP addresses and do TCP port scanning. It can check all ports, or the ones you select. It is a very fast and p...
Post a Comment
Read more

What is Enumeration?

Post a Comment
Read more

Certified Ethical Hacker(CEH) Official (CEH) Training and Certification Course

Certified Ethical Hacker (CEH) Official (CEH) Training and Certification Course Certified Ethical Hacker  (CEH)  Training  is a skilled professional who understands and knows how to look for weaknesses and vulnerabilities in target systems and uses the same knowledge and tools as a black hate hacker, but Certified Ethical Hacker (ceh)   is work with a lawful  manner to assess the security posture of a target system(s). the  ethical hacking  certification (ceh)  have the power to provide you to better understating  of  ethical hacking  and it’s course (CEH)Certified Ethical Hacker summer Internship  Contents Introduction to Ethical Hacking Foot printing and reconnaissance Foot-printing Active (Tool Based Practical) Foot-printing Passive (Passive Approach) In-depth Network Scanning Enumeration User Identification System Hacking Password Cracking & Bypassing Viruses and Worms Trojan a...
Post a Comment
Read more