# SQL injeck
who can give instructions or recommendations on sql inject ?

var unreadAlerts = '1';
Welcome back, purely_cabbage. You last visited: Today, 06:36 AM Log Out
You have one unread private message from dkota titled Welcome to the Forum!
New Reply

Threaded Mode SQL injeck

alexeyi21
Active Member
Posts:
31
Threads:
3
Joined:
May 2023
Reputation:
0
Credits: 5.23€ [Donate]
#1
05-28-2023, 02:30 PM
who can give instructions or recommendations on sql inject ?
PM Rate
Report
alexeyi21
Active Member
Posts:
31
Threads:
3
Joined:
May 2023
Reputation:
0
Credits: 5.23€ [Donate]
#2
05-28-2023, 06:02 PM

> ghost Wrote:

> > alexeyi21 Wrote: who can give instructions or recommendations on sql inject ?

> Start with installing linux which has sqlimap.

already installed
PM Rate
Reply Quote // Report
DerRoteMilan
Active Member
Posts:
31
Threads:
5
Joined:
Jun 2023
Reputation:
19
Credits: 0.67€ [Donate]
#3
06-06-2023, 01:06 AM
do you know SQL? If you don't, then that is your first step.
Second would be to implement a simple database connection in a language of your choice.
You will understand how SQL injections work and happen that way.
You likely have defaulted to string concatenation for your SQL strings
that is however what causes SQL injections, you should always use prepared statements
instead and use the database drivers functionality to supply arguments.
There still might be problems with the input, so you have to do sanity checks on the data
provided also. Usually this can be done in the database directly using PL/SQL but using client side
checks is more common now. Client side means client to the database and is usually still on the server
a customer or anything should never run software that has direct database access ofc.
PM Rate
Reply Quote // Report
Makundra
Active Member
Posts:
23
Threads:
0
Joined:
Jun 2023
Reputation:
0
Credits: 6.35€ [Donate]
#4
06-07-2023, 08:26 AM
this maybe could help you out anonfiles.com/q9Sb4aebba/SQL_Injection_Tutorial.pdf
PM Rate
Reply Quote // Report
aha
Junior Member
Posts:
11
Threads:
1
Joined:
Jun 2023
Reputation:
0
Credits: 8.05€ [Donate]
#5
06-15-2023, 05:21 AM
If you're learning, take a look at Hack The Box and search for SQL Injection machines
aha@lake.money
TOX: E9D179114E95EC8FA4F5E35AFA3730C02A820E6AC390EB256B43117E507BB62BAC5A381CBBF4
PM Rate
Reply Quote // Report

« Next Oldest | Next Newest »

New Reply

Quick Reply
Message Type your reply to this message here. Signature Disable Smilies | You have selected one or more posts to quote. Quote these posts now or deselect them.

- Subscribe to this thread

Users browsing this thread: purely_cabbage
var thread_deleted = "0"; if(thread_deleted == "1") { $("#quick_reply_form, .new_reply_button, .thread_tools, .inline_rating").hide(); $("#moderator_options_selector option.option_mirage").attr("disabled","disabled"); }