SQL Injection

  1. SQL Injection Classification
    1. In-Band SQL Injection
      1. Characteristics and Detection
        1. Data Retrieval Methods
          1. Error-Based Injection
            1. Database Error Exploitation
              1. Error Message Analysis
                1. Information Extraction Techniques
                  1. Database-Specific Error Patterns
                  2. UNION-Based Injection
                    1. UNION Query Construction
                      1. Column Count Determination
                        1. Data Type Matching
                          1. Information Extraction
                            1. Multi-Table Data Retrieval
                          2. Inferential SQL Injection
                            1. Blind Injection Fundamentals
                              1. Detection Challenges
                                1. Boolean-Based Blind Injection
                                  1. True/False Query Construction
                                    1. Application Response Analysis
                                      1. Bit-by-Bit Data Extraction
                                        1. Conditional Logic Exploitation
                                        2. Time-Based Blind Injection
                                          1. Time Delay Functions
                                            1. Response Time Measurement
                                              1. Timing Attack Techniques
                                                1. Database-Specific Delay Methods
                                              2. Out-of-Band SQL Injection
                                                1. External Communication Channels
                                                  1. Detection Requirements
                                                    1. DNS Exfiltration
                                                      1. DNS Query Triggering
                                                        1. Subdomain Data Encoding
                                                          1. DNS Server Monitoring
                                                          2. HTTP Exfiltration
                                                            1. Server-Side Request Forcing
                                                              1. External Endpoint Monitoring
                                                                1. Data Transmission Methods

                                                            Previous

                                                            2. SQL Fundamentals for Security Testing

                                                            Go to top

                                                            Next

                                                            4. SQL Injection Attack Methodology