Python: Penetration Testing for Developers

Chapter 4. SQL Injection

In this chapter, we will cover the following topics:

• Checking jitter
• Identifying URL-based SQLi
• Exploiting Boolean SQLi
• Exploiting Blind SQLi
• Encoding payloads

Introduction

SQL Injection is the loud and noisy attack that beats you over the head in every tech-related media provider you see. It is one of the most common and most devastating attacks of recent history and continues to thrive in new installations. This chapter focuses on both performing and supporting SQL Injection attacks. We will create scripts that encode attack strings, perform attacks, and time normal actions to normalize attack times.