Post: Sql Injection tutorial
06-17-2009, 11:45 PM #1
CA5U4LTY
Pokemon Trainer
(adsbygoogle = window.adsbygoogle || []).push({}); Here is a tutorial on how to do an SQL injection. Probably one of the easiest ways to hack into a database with poor encyption that doesnt properly filter for escape characters. To protect against SQL injections, user input must not directly be embedded in SQL statements. Instead, parameterized statements must be used (preferred), or user input must be carefully escaped or filtered. But, many website builders build the parameters in SQL, therefore leaving loopholes for people to hack into the database. Still dont understand? Watch the video!!


*REMEMBER* The password must be interpreted as letters, not symbols (like the typical "dot" as represented as password inputs.) Go into notepad, type the MySql (form a' or 't'=t'Winky Winky and copy and paste it into the password input.




[ame="https://www.youtube.com/watch?v=MJNJjh4jORY"]YouTube - SQL Injection[/ame]
Last edited by CA5U4LTY ; 06-18-2009 at 06:02 AM.
06-20-2009, 04:07 PM #2
Wow thats cool and all, but the SS is a little dangerous

Copyright © 2024, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo