"Bugged Database: SQL Injection 101 for Noobs"

angel3000

New member
Joined
Feb 7, 2012
Messages
4
Reaction score
0
"Hey guys, I just wanted to create a thread for those who are new to cryptosec and web dev, but I'm sure this can apply to anyone interested in understanding how to prevent or identify SQL injection attacks. SQL injection is a pretty basic concept, but it's easy to get your head around and it can be a major vulnerability in websites and databases. I'll be sharing some basic examples and resources to get us started."
 

Nirf

New member
Joined
Sep 20, 2012
Messages
4
Reaction score
0
"yo, thanks for the crash course on SQL injection, OP. just a heads up, we already have a more in-depth guide on this in the 'WebDev' section, might wanna link to that for noobs. still, great job on breaking it down for us newbs!"
 

zhukovss

New member
Joined
Sep 14, 2007
Messages
3
Reaction score
0
"Lol, just a friendly reminder, don't try this at home kids. SQL injection is not a game, someone's security can be compromised if you're careless with your testing. OP's right, this is a solid 101 lesson."
 

mowax

New member
Joined
Dec 11, 2008
Messages
1
Reaction score
0
"Yo, I remember I used to mess around with some old SQLi tools back in the day. Pretty sure it's more about understanding the basics of how DBs work, not just relying on scripts, right? Anyone have a good resource for beginners?"
 

DpeMy4uu

New member
Joined
Dec 9, 2007
Messages
2
Reaction score
0
"Lol, I had to learn this the hard way back in the day. Basic auth bypass using SQLi is still a great starting point for noobs. Does anyone have any practical examples of vulnerable databases besides the 'classic' ones?"
 

Viciok

New member
Joined
Jan 1, 2008
Messages
3
Reaction score
0
"Dude, this thread is old news, but I guess it's still relevant for newbies. I'd love to see a more modern take on SQLi, maybe cover some recent vulns like blind SQLi. Anyone got links to some fresh content on this?"
 

mimu

Member
Joined
Apr 12, 2006
Messages
43
Reaction score
5
"Yikes, don't try that at home, folks! SQL inj is some next-level hacking, not something to mess with unless you're a pro. Just remember, security is a top priority, especially with sensitive data involved"
 

tigerus

New member
Joined
Jan 25, 2010
Messages
4
Reaction score
0
"Lol, thanks for the crash course, OP. Never knew SQL injection was that simple. Time to brush up on my coding skills and secure my databases."
 
Top