SQL Injection
Download as PPTX, PDF2 likes1,143 views
The document discusses SQL injection, a security exploit that allows attackers to manipulate and retrieve data from a web application's backend database through malformed SQL statements. It outlines various types of SQL injection techniques, including SQL manipulation, code injection, and buffer overflow, along with their operation methods. Additionally, it addresses countermeasures to prevent such attacks, emphasizing the importance of minimizing database privileges and implementing input validation and error handling.
SQL Injection
- 1. Asish Ku. Rath Sr. Software Developer
- 2. Introduction Types of SQL INJECTION Steps for performing SQL INJECTION How it Works Countermeasures Conclusion References
- 4. SQL Injection is a type of Security Exploit in which the attacker injects SQL statements to gain access to restricted resources and make changes. TARGET: Web Application with backend database Uses client supplied SQL queries to get unauthorized access to database.
- 5. SQL Manipulation Code Injection Function Call Injection Buffer Over Flow
- 6. It means to manipulate and retrieve data in a relational database. SQL Manipulation comprises the SQL-Data change statements, which modify the stored data but not the schema or database objects.
- 7. Code injection is the exploitation of computer application that is caused by processing invalid data. It is always used malevolently which means it is always used in an evil way to destroy a database by exploiting the other codes.
- 8. It is one of the most common type of injection technique where functions are used for injection. When a function call a parameter then the attacker passes a different parameter to the function resulting something different than expected.
- 9. It also one of the common technique used for injection at the users input side. It is a mechanism of injection by input of data exceeding the limits of the fields of the user input resulting an error message using which the SQL codes are injected.
- 10. Input field to submit data (e.g. a login page)
- 11. Check for server pages if input field is absent e.g. http://www.xsecurity.com/index.jsp?id=10 In the above example attack will be like this: e.g. http://www.xsecurity.com/index.jsp?id=debu’ or 1=1 – Look for errors: This can be done using single quotation mark (‘). E.g.
- 12. Using single quote in the input •sujit’ or 1=1 -- •login: shweta’ or 1=1 -- •http://search/index.asp?id=sql’ or 1=1 -- Depending on the error: • ‘ or 1=1 -- • “ or 1=1 -- •‘ or ‘a’ = ‘a • “ or “a” = “a •‘) or (‘a’ = ‘a)
- 16. Minimize the Privilege of Database Connection Disable Verbose Error Message Protect the system account “SA” Audit Source Code: Escape Single Quotes Input Validation Reject Known Bad Input Input Bound Checking All user inputs should be filtered
- 17. SQLBlock
- 20. Now a days SQL injection is one of the biggest nightmare among Database administrators. Though we have a lot of way for its prevention but still today’s most website suffer from this attack.
- 22. 22