SQL Injection - Finding a Vulnerability - SQL Injection Part 1
In this video learn a simple method for detecting possible SQL injection attacks.
The consequences of misconfigured SQL can be extremely severe such as:
1. Complete access to private data such as customer data.
2. The possibility to completely destroy important database records that are not backed up.
It can be as simply as checking forms with a single or double quote payload to see if any errors are provided. Watch the video to see an example of this in practice along with analysis of the resultant error.
00:00 Intro
00:17 What is SQL?
02:58 Sending an SQL injection payload
04:11 Interpreting the http response
05:32 Analyzing the SQL query
06:57 Are error disclosures ok in a web app?
08:03 Enumeration of vulnerabilities
10:04 Summary