New answers tagged

6

I assume that it is a MySQL database. 1749 (is greater that 0) and nQtm (valid alias - "variable name" for derived table) were chosen randomly by sqlmap. The problem with sleep(N) is that SQL database evaluates it to 0 and hence post=1 AND 0 will be evaluated to zero (FALSE : 1 AND 0 = 0) too. Value 1749 gets interpreted by SQL database as TRUE (similar ...


0

In general SQL injection depends on the database engine used, I think in your example you provide a sql for MariaDB/MySQL database. The function sleep on PostgreSQL is pg_sleep, so your injection will not work on PostgreSQL. MariaDB [CODINGGROUND]> (SELECT 1749 FROM (SELECT(SLEEP(1)))nQtm) ...


3

There are quite a few tools out there that can help find vulnerabilities, such as SQL injection points - none of these will find all of them. Blackbox testing - This is described by Vipul in his answer and involves testing / fuzzing the interfaces exposed in the application (UIs, Services...). These are closer to how an attacker might look at the system, ...


2

I'm wondering, if it's possible to discover all the endpoints for any product which is prone to SQL injection. NO ! Well wouldn't that be a magical tool. Well there are a lot of scanners that might crawl your site and try inserting sql statements and then check the returned result.Google them and you will find scanners or crawlers.But again you will not ...


Top 50 recent answers are included