SQL Injection

  1. SQL Fundamentals for Security Testing
    1. Basic SQL Structure
      1. Statement Syntax
        1. Query Components
          1. Command Categories
          2. Data Manipulation Language
            1. SELECT Statements
              1. Basic Retrieval
                1. Column Selection
                  1. Table Joins
                    1. Subqueries
                    2. INSERT Operations
                      1. Single Row Insertion
                        1. Multiple Row Insertion
                          1. Data Source Insertion
                          2. UPDATE Operations
                            1. Single Record Updates
                              1. Bulk Updates
                                1. Conditional Updates
                                2. DELETE Operations
                                  1. Single Record Deletion
                                    1. Bulk Deletion
                                      1. Cascading Deletes
                                    2. Data Definition Language
                                      1. CREATE Statements
                                        1. Table Creation
                                          1. Database Creation
                                            1. Index Creation
                                            2. ALTER Statements
                                              1. Table Structure Modification
                                                1. Column Addition and Removal
                                                  1. Constraint Management
                                                  2. DROP Statements
                                                    1. Table Deletion
                                                      1. Database Deletion
                                                        1. Object Removal
                                                      2. Essential SQL Clauses
                                                        1. WHERE Clause
                                                          1. Condition Specification
                                                            1. Logical Operators
                                                              1. Comparison Operators
                                                                1. Pattern Matching
                                                                2. UNION Operations
                                                                  1. Result Set Combination
                                                                    1. Column Count Requirements
                                                                      1. Data Type Compatibility
                                                                        1. UNION vs UNION ALL
                                                                        2. ORDER BY Clause
                                                                          1. Result Sorting
                                                                            1. Multiple Column Sorting
                                                                              1. Ascending and Descending Order
                                                                              2. GROUP BY Clause
                                                                                1. Data Aggregation
                                                                                  1. Aggregate Functions
                                                                                    1. HAVING Clause
                                                                                  2. SQL Comments and Terminators
                                                                                    1. Single-Line Comments
                                                                                      1. Multi-Line Comments
                                                                                        1. Query Terminators
                                                                                          1. Comment Usage in Payloads
                                                                                          2. Database Metadata Access
                                                                                            1. Information Schema
                                                                                              1. Standard Metadata Tables
                                                                                                1. Schema Discovery Queries
                                                                                                  1. Column Information Retrieval
                                                                                                  2. System Catalogs
                                                                                                    1. Database-Specific System Tables
                                                                                                      1. Metadata Query Techniques
                                                                                                        1. Permission-Based Access

                                                                                                    Previous

                                                                                                    1. Introduction to SQL Injection

                                                                                                    Go to top

                                                                                                    Next

                                                                                                    3. SQL Injection Classification