Seminor Topic: SQL Injection

SQL: SQL is a standard language for storing, manipulating and retrieving data in databases.
SQL Injection:
SQL injection is a code injection technique that might destroy your database.

SQL injection is one of the most common web hacking techniques.

SQL injection is the placement of malicious code in SQL statements, via web page input.

Types Of SQL Attack:

1. First Order Attack
2. Second Order Attack
3. Lateral Injecion

SQL Injection Mechanism:

1. Injection through user input
2. Injection through cookies
3. Injection through server variables
4. Second order Injection

Attack Intent:
1. Determining database schema
2. Extracting Data
3. Adding or Modifying Data
4. Bypassing authentication

Inference: Inject command into the site and then observe how the function/response of the website

1. Blind Injection
2. Timing Attacks

Prevention: The root cause of SQL injection vulnerabilities is insufficient input validation.

1. Defensive Coding Practices

2. Detection And Prevention Techniques

Submitted To Submitted By
Ashok Kumar Yadav Mohammad Javed

Dileep Kumar Yadav CSE 3rd Year VIth Sem

Roll No:175566