All Tricks

SQL Injection: The definitive guide An SQL Injection is an attack targeted to a vulnerable system. Here I will show you the strategies to adopt for your security. Let’s begin! SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). These attacks allow attackers to spoof identity, tamper with existing data, cause repudiation issues such as voiding transactions or changing balances, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailable, and become administrators of the database server. [Resource: Wikipedia ] It is one of the most common attacks on the websites. The best passwords and the best mindset may not be enough. If you have a website that uses this type of database, you must learn how to defend it. An example of attack: User: Password: ...

By Parth So far i have provided few Web Application Pen Testing tutorials .  Now it is time to for practicing your hacking / pentesting skills in legal way. Last time , i explained about the  Damn Vulnerable  Web Application (DVWA). Now, i've come with different web application that will help you to improve your knowledge in web app pentesting. The BodgeIt Store Like DVWA, This is also a Vulnerable web Application that will help you to develop your skills in Pen testing. With this Vulnerable Application , you can practice the Following attacks: Cross Site Scripting (XSS) SQL injection (SQLi) Hidden (but unprotected) content Cross Site Request Forgery Debug code Insecure Object References Application logic vulnerabilities There is also a 'scoring' page (linked from the 'About Us' page) where you can see various hacking challenges and whether you have completed them or not. How to setup the Pen Testing Lab?  Requirements: BodgeIt app( download ) T...

✔ What is SQL Injection ? By Parth Makadiya GI SQL Injection is one the most popular Web application hacking method. In SQL Injection an attacker find website vulnerability (Vulnerability means Weakness point of website) and Inject Malicious code into URL and get Database of Website and Hack the website this is called SQL Injection attack Exploiting DB (Database) and also SQL Injection Vulnerability Exploitation. Using SQL Injection attack method an attacker can get complete DB of website and User ID and Password can be exploded, an attacker can also Shut down My SQL Server and Server will stop working. An attacker can modify content of website and bypass login.