This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "SQL Injection Cookbook"

From OWASP
Jump to: navigation, search
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
 +
This document assumes a basic knowledge of standard SQL (selects, inserts, joins, etc.).
 +
 
=Reconnaissance=
 
=Reconnaissance=
 
==Identifying the SQL platform==
 
==Identifying the SQL platform==
  
 
=Attacks=
 
=Attacks=
==Injection testing strings==
+
==Injection fuzzing strings==
==SQL tautology attacks==
 
  
=Database Servers=
+
=Database platforms=
* [[IBM DB2|SQL Injection Cookbook - DB2]]
+
* [[SQL Injection Cookbook - DB2|IBM DB2]]
* [[Microsoft SQL|SQL Injection Cookbook - MSSQL]]
+
* [[SQL Injection Cookbook - MSSQL|Microsoft SQL]]
* [[MySQL|SQL Injection Cookbook - MySQL]]
+
* [[SQL Injection Cookbook - MySQL|MySQL]]
* [[Oracle|SQL Injection Cookbook - Oracle]]
+
* [[SQL Injection Cookbook - Oracle|Oracle]]
* [[PostgreSQL|SQL Injection Cookbook - PostgreSQL]]
+
* [[SQL Injection Cookbook - PostgreSQL|PostgreSQL]]
  
 
* [[SQL Injection Cookbook template|Template for new server types]]
 
* [[SQL Injection Cookbook template|Template for new server types]]

Latest revision as of 07:15, 14 January 2007

This document assumes a basic knowledge of standard SQL (selects, inserts, joins, etc.).

Reconnaissance

Identifying the SQL platform

Attacks

Injection fuzzing strings

Database platforms