Sinisterly
WHEN A WEBPAGE IS VULNERABLE AT SQL INJECTION? - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: WHEN A WEBPAGE IS VULNERABLE AT SQL INJECTION? (/Thread-WHEN-A-WEBPAGE-IS-VULNERABLE-AT-SQL-INJECTION)



WHEN A WEBPAGE IS VULNERABLE AT SQL INJECTION? - 1nqu1s1t0r - 02-14-2013

This is my first thread hope you like it !


Depending on how the application is coded the error will be like the following :

1. The SQL error is displayed on the page and is visible to the user from the

2.Web browser.The SQL error is hidden in the source of the Web page for debugging purposes.

3. Redirection to another page is used when an error is detected.

4. An HTTP error code 500 (Internal Server Error) or HTTP redirection code 302 is retured.

5.The application handles the error properly and simply shows no results, perhaps displaying a generic error page.

:dance: Hope you like it :dance:

From http://the-grand-gamer.blogspot.com


WHEN A WEBPAGE IS VULNERABLE AT SQL INJECTION? - 1nqu1s1t0r - 02-14-2013

This is my first thread hope you like it !


Depending on how the application is coded the error will be like the following :

1. The SQL error is displayed on the page and is visible to the user from the

2.Web browser.The SQL error is hidden in the source of the Web page for debugging purposes.

3. Redirection to another page is used when an error is detected.

4. An HTTP error code 500 (Internal Server Error) or HTTP redirection code 302 is retured.

5.The application handles the error properly and simply shows no results, perhaps displaying a generic error page.

:dance: Hope you like it :dance:

From http://the-grand-gamer.blogspot.com


WHEN A WEBPAGE IS VULNERABLE AT SQL INJECTION? - 1nqu1s1t0r - 02-14-2013

This is my first thread hope you like it !


Depending on how the application is coded the error will be like the following :

1. The SQL error is displayed on the page and is visible to the user from the

2.Web browser.The SQL error is hidden in the source of the Web page for debugging purposes.

3. Redirection to another page is used when an error is detected.

4. An HTTP error code 500 (Internal Server Error) or HTTP redirection code 302 is retured.

5.The application handles the error properly and simply shows no results, perhaps displaying a generic error page.

:dance: Hope you like it :dance:

From http://the-grand-gamer.blogspot.com


RE: WHEN A WEBPAGE IS VULNERABLE AT SQL INJECTION? - The Alchemist - 02-15-2013

Thanks for sharing.
You could have given some examples of error messages that appear when a site is vulnerable to SQL injection. It would have helped people in coding Vulnerability Scanners like this : http://www.hackcommunity.com/Thread-Vulnerability-Scanner-By-The-Alchemist


RE: WHEN A WEBPAGE IS VULNERABLE AT SQL INJECTION? - The Alchemist - 02-15-2013

Thanks for sharing.
You could have given some examples of error messages that appear when a site is vulnerable to SQL injection. It would have helped people in coding Vulnerability Scanners like this : http://www.hackcommunity.com/Thread-Vulnerability-Scanner-By-The-Alchemist


RE: WHEN A WEBPAGE IS VULNERABLE AT SQL INJECTION? - The Alchemist - 02-15-2013

Thanks for sharing.
You could have given some examples of error messages that appear when a site is vulnerable to SQL injection. It would have helped people in coding Vulnerability Scanners like this : http://www.hackcommunity.com/Thread-Vulnerability-Scanner-By-The-Alchemist


RE: WHEN A WEBPAGE IS VULNERABLE AT SQL INJECTION? - gdteska - 02-15-2013

(02-15-2013, 05:22 AM)The Alchemist Wrote: Thanks for sharing.
You could have given some examples of error messages that appear when a site is vulnerable to SQL injection. It would have helped people in coding Vulnerability Scanners like this : http://www.hackcommunity.com/Thread-Vulnerability-Scanner-By-The-Alchemist

oh ok . Thanks for the vuln code !