The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
71 views

Why isn't it possible to do SQL injection (HIGH Level) in this example in Damn Vulnerable Web App?

$query = " $sql = select * from users where id = '$id' " Won't $id=3' OR '1'='1 break the query ? The doubt arose because someone claimed it can't be broken.
0
votes
1answer
230 views

Using timeouts to automatically detect blind sql injection exploits

I'm working on a penetration testing tool, and I have error-based sql injection pretty much covered, but I was wondering, is it possible to use timeouts, along with built in sql commands to detect an ...
12
votes
3answers
2k views

Is it possible to do SQL injection (HIGH Level) on Damn Vulnerable Web App?

I searched all over google to see how it would be possible to bypass the following (it's from the high level of security from DVWA): <?php if (isset($_GET['Submit'])) { // Retrieve data $id ...
0
votes
3answers
824 views

Issues setting up DVWA for SQLMAP

I am starting on sqlmap, and have dvwa for practicing web app penetration. I am having the error "Could not connect to the database - please check the config file." Not sure what the problem is but ...
5
votes
2answers
796 views

Why some sites are not shown when embedding them in an iframe?

Exploiting the DVWA's stored XSS option, I'm using the following payload: <iframe src="url">. I'd like to know why do some sites work but others don't when using this payload. For example: ...