Advance SQL

Same Peoples Says me that tech advance SQL Injection So Today we learn 

Advance SQL Injection 

(This is only education purpose )

What is SQL Injection attack?

SQL Injection Attacks uses SQL websites or web applications. It relies on the strategic injection of malicious code or script into existing queries. 

SQL injection is a powerful and dangerous attack. It identifies the flaws and vulnerabilities in a website or application. 

Advanced SQL 

Injection Advanced SQL injection may include an enumeration of databases like MySQL, MSSQL, MS Access, Oracle, DB2, or Postgre SQL, tables and column in order to identify privilege level of users, account information of database administrator and database structure disclosure. it also includes passwords and hashes grabbing, and transferring the database to the remote machine. 

The scope of SQL Injection Attack

 SQL injection impact can be measured by observing the following parameters that an attacker is intended to overcome: 

 Bypassing the Authentication 

 Revealing sensitive information 

 Compromised Data integrity 

 Erasing the database 

 Remote Code Execution

Types of SQL Injection Attack:

• In-band SQLi 
• Inferential SQLi
• Out-of-band SQLi 

Launch SQL Injection Attacks 

Appropriate SQL injection attack from the category cab be initiate just after gathering the information about the structure of database and vulnerabilities found. By exploiting them, the injection can be successful. SQL injection attacks such as Union SQL injection, Error-based SQL injection, Blind SQL injection and other can be used to extract information from the database such as extracting Database name, tables, columns, rows, and fields. The injection can also have intended for bypassing the authentication. 

 IBM Security AppScan Standard 

Download

Click On Create New Scan

Select Scan template  demo.testfire.net

 Click Next 

Select Login Method

Select Test Policy and Click Next

Here You Select how do you want to start the scan. 

Click Finish

Here we are using a demo testing; it does not find any issue.

 If it found the issue, Issue section will show the detected issues list. To explore, click the security issue, it will show the details.

Task section will show the recommended remediation actions.