1

I am trying to learn "SQL Injection" concepts and also trying to practice some Kali tools to learn, but there is a question that I do not understand and my question is why do most tools need URL's that end with "AAA.BBB?id=000" as a input string for injection.

7

When you see URL's that have that kind of syntax id=123, there is a good chance the underlying code will use 123 as input to some kind of dynamic SQL statement. Unless the underlying code is written to prevent SQL injection, you can gain additional information from the database (or cause harm) by simply adding additional information to the url directly in the browser window.

Have a look at SQL Injection Walkthrough

What is SQL Injection? It is a trick to inject SQL query/command as an input possibly via web pages. Many web pages take parameters from web user, and make SQL query to the database. Take for instance when a user login, web page that user name and password and make SQL query to the database to check if a user has valid name and password. With SQL Injection, it is possible for us to send crafted user name and/or password field that will change the SQL query and thus grant us something else.

What do you need? Any web browser.

Try to look especially for URL that takes parameters, like:

http://duck/index.asp?id=10

There are numerous examples of SQL injection in the post I referenced above.

  • 2
    Even if the underlying query is parameterized (avoiding SQL injection), the issue with passing values in the url is that it that those are easy changed by the user, allowing unintended data disclosure. – Dan Guzman Jul 25 '18 at 11:13
  • 3
    Well, SQL Injection is not limited to web applications but can affect any program, that accepts input and uses that input in SQL queries. That could also be a desktop application or a mobile app, etc.. Though for web applications, which are typically accessible by the public, while the access to other programs is often limited to a comparatively small group of users, the probability of an attack may be larger in general. – sticky bit Jul 25 '18 at 11:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.