SQL Injection

SQL Injection attack and defense techniques

wgpsec 510d6fb 337 B Updated

File contents

SQL Injection

SQL injection is a code injection technique that exploits security vulnerabilities in an application's database layer.

Steps

  1. Identify injection points
  2. Determine database type
  3. Extract data using UNION or blind techniques

wgpsec/context1337/tree/main/testdata/skills/sql-injection commit 510d6fbbb3

Frequently asked questions

npx skillmds@latest add wgpsec/sql-injection