tomevault-io Injection (OWASP A03)
Injection flaws occur when untrusted data is sent to an interpreter as part of a command or query.
Skills
- SQL Injection - Database query manipulation
- NoSQL Injection - MongoDB and NoSQL attacks
- Command Injection - OS command execution
- SSTI - Server-Side Template Injection
- LDAP Injection - Directory service attacks
- XPath Injection - XML query manipulation
- ORM Injection - ORM framework exploitation
- CRLF Injection - HTTP header injection
Quick Reference
| Attack | Detection | Tools |
|---|---|---|
| SQLi | ', ", OR 1=1 |
sqlmap |
| Command | ;, |, && |
commix |
| SSTI | {{7*7}}, ${7*7} |
tplmap |
| NoSQL | $ne, $gt, $regex |
manual |
Converted and distributed by TomeVault — claim your Tome and manage your conversions.