SQL Injection Strategies

更新时间：2021-06-18 18:34:39

封面

版权信息

Why subscribe?

Contributors About the authors

About the reviewers

Packt is searching for authors like you

Preface

Section 1: (No)SQL Injection in Theory

Chapter 1: Structured Query Language for SQL Injection

Technical requirements

An overview of SQL – a relational query language

The syntax and logic of SQL

Security implications of SQL

Weaknesses in the use of SQL

SQL for SQL injection – a recap

Summary

Questions

Chapter 2: Manipulating SQL – Exploiting SQL Injection

Technical requirements

Exploitable SQL commands and syntax

Common SQL injection commands and manipulation

Not only SQL injection – non-relational repositories

The injection vulnerability in non-relational repositories

Wrapping up – (No-)SQL injection in theory

Summary

Questions

Section 2: SQL Injection in Practice

Chapter 3: Setting Up the Environment

Technical requirements

Understanding the practical approach and introducing the main tools

Overview of the OWASP BWA project

The attacker – configuring your client machine

The target – configuring your target web applications

The target – configuring your target-emulated devices

Operating the lab

Summary

Questions

Chapter 4: Attacking Web Mobile and IoT Applications

Technical requirements

Attacking traditional web applications– manual techniques

Attacking traditional web applications – automated techniques

Attacking mobile targets

Attacking IoT targets

Summary

Questions