Скачать или смотреть Lab - Injection Attacks

Because SQL injection attacks can be very damaging and very common, we are obligated to detect and investigate these vulnerabilities on the Pixel Paradise web applications. We would be failing our customer if we did not test for it.

You need more practice with vulnerability scanning tools, so let's focus on the discovery of SQL injection vulnerabilities. You should be prepared to exploit these vulnerabilities as part of a test if the pentesting agreement permits it. Pixel Paradise has provided us with access to their dev environment to run our tests during a prearranged time window so they can revert any damage we might cause through our efforts.

In this lab, you will complete the following objectives:

Part 1: Exploit an SQL Injection Vulnerability on DVWA
Part 2: Research SQL Injection Mitigation