sql-injection

name	sql-injection
description	SQL Injection attack and defense techniques
metadata	{"tags":"sqli, owasp, web, database","category":"exploit","difficulty":"medium"}

SQL Injection

SQL injection is a code injection technique that exploits security vulnerabilities in an application's database layer.

Steps

1. Identify injection points
2. Determine database type
3. Extract data using UNION or blind techniques