SQL Injection

Related Concepts

• Useful SQL Functions and Queries
• Classic Injection Bypass
• Types of SQL Injection
  • UNION based (In-band) Injection
  • ERROR based (In-band) Injection
  • BOOLEAN based (Blind) Injection
  • TIME based (Blind) Injection
• SQL Injection Tools
  • Burp Suite
  • SQLMap

Mitigation Techniques

• How to Prevent SQL Injection: Attacks and Defense Techniques
• Always use Prepare Statements for Queries
• Use Whitelisting when the user controls fields like the column name, table name
• Configure DB to use the least possible privileges

Acunetix Web Vulnerability Scanner - Test websites