Home >> Taxonomy >> Attacks >> Sql injection

SQL Injection

SQL injection is a cyber-attack technique where in malicious SQL code is injected into input fields or parameters of an application. The objective is to exploit vulnerabilities in the application's input validation processes, thereby manipulating the underlying SQL queries to gain unauthorized access, retrieve sensitive data, or tamper with the database.

Example

Ashley Madison data breach involved a website specializing in extramarital affairs. Hackers claimed to have used SQL injection to access the site's user database, revealing sensitive information about millions of users.

Links

• Medium: Ashley Madison suffers from 30GB data breach
• Wikipedia: Ashley Madison data breach
• SQL Injection | OWASP

Cards

Data-validation-&-encoding

• Data-validation-&-encoding 2
• Data-validation-&-encoding 3
• Data-validation-&-encoding 4
• Data-validation-&-encoding 5
• Data-validation-&-encoding 6
• Data-validation-&-encoding 7
• Data-validation-&-encoding 8
• Data-validation-&-encoding 9
• Data-validation-&-encoding J
• Data-validation-&-encoding Q
• Data-validation-&-encoding K
• Data-validation-&-encoding A

Authentication

• Authentication 8
• Authentication J
• Authentication Q

Authorization

• Authorization 6
• Authorization 7
• Authorization 8
• Authorization Q
• Authorization A

View source on GitHub

Loading comments 0%