SQL Injection

  1. Database-Specific SQL Injection
    1. MySQL and MariaDB
      1. Syntax Characteristics
        1. Error Message Patterns
          1. Version-Specific Features
            1. File Operations
              1. LOAD_FILE Function
                1. INTO OUTFILE Clause
                  1. File Permission Requirements
                  2. Information Schema Usage
                    1. User-Defined Functions
                    2. Microsoft SQL Server
                      1. T-SQL Syntax Features
                        1. Error Message Analysis
                          1. System Function Exploitation
                            1. xp_cmdshell Usage
                              1. sp_OACreate Methods
                                1. Bulk Insert Operations
                                2. Linked Server Attacks
                                  1. CLR Integration Exploitation
                                  2. PostgreSQL
                                    1. Syntax Distinctions
                                      1. Error Handling Characteristics
                                        1. System Function Usage
                                          1. COPY Command Exploitation
                                            1. Administrative Functions
                                            2. Extension Exploitation
                                              1. Procedural Language Usage
                                              2. Oracle Database
                                                1. PL/SQL Characteristics
                                                  1. Error Message Patterns
                                                    1. Built-in Package Exploitation
                                                      1. UTL_FILE Usage
                                                        1. UTL_HTTP Functions
                                                          1. DBMS_SQL Package
                                                          2. Java Integration Attacks
                                                            1. XML Database Features
                                                            2. SQLite
                                                              1. File-Based Database Characteristics
                                                                1. Syntax Limitations
                                                                  1. Pragma Statement Usage
                                                                    1. Attach Database Functionality
                                                                    2. NoSQL Databases
                                                                      1. MongoDB Query Injection
                                                                        1. CouchDB Map-Reduce Injection
                                                                          1. Cassandra CQL Injection

                                                                        Previous

                                                                        5. Advanced SQL Injection Techniques

                                                                        Go to top

                                                                        Next

                                                                        7. Prevention and Defense Strategies