SQL Injection

  1. Advanced SQL Injection Techniques
    1. Second-Order SQL Injection
      1. Stored Input Exploitation
        1. Multi-Stage Attack Execution
          1. Detection Challenges
            1. Common Scenarios
            2. Stacked Query Injection
              1. Multiple Statement Execution
                1. Database Support Requirements
                  1. Semicolon Separator Usage
                    1. Execution Limitations
                    2. Filter and WAF Evasion
                      1. Encoding Techniques
                        1. URL Encoding
                          1. Hexadecimal Encoding
                            1. Unicode Encoding
                              1. Base64 Encoding
                                1. Double Encoding
                                2. Obfuscation Methods
                                  1. Case Variation
                                    1. Comment Insertion
                                      1. Whitespace Manipulation
                                        1. String Concatenation
                                          1. Function Substitution
                                          2. Alternative Syntax Usage
                                            1. Database-Specific Quirks
                                              1. Non-Standard Functions
                                                1. Operator Alternatives
                                                2. Null Byte Injection
                                                  1. Legacy System Exploitation
                                                    1. String Termination Abuse
                                                  2. NoSQL Injection Techniques
                                                    1. MongoDB Injection
                                                      1. CouchDB Injection
                                                        1. Cassandra Injection
                                                          1. Redis Injection

                                                        Previous

                                                        4. SQL Injection Attack Methodology

                                                        Go to top

                                                        Next

                                                        6. Database-Specific SQL Injection