16 May 2007 | 19,396 views

Comprehensive SQL Injection Cheat Sheet

Want to Learn Penetration Testing

A reader e-mailed me a while ago about a fairly comprehensive SQL Injection ‘Cheat Sheet’ they had created and posted up.

I compared it to the other ones I had bookmarked, and it was different enough to be worth posting.

Currently only for MySQL and Microsoft SQL Server, some ORACLE and some PostgreSQL. Most of samples are not correct for every single situation. Most of the real world environments may change because of parenthesis, different code bases and unexpected, strange SQL sentences.

Samples are provided to allow reader to get basic idea of a potential attack and almost every section includes a brief information about itself.

It’s worthy resource to save on your Hacking pendrive and bookmark in your portable Firefox.

http://ferruh.mavituna.com/makale/sql-injection-cheatsheet/

Post to Twitter Post to Facebook Post to Google Buzz Post to Delicious Post to Digg Post to Reddit Post to StumbleUpon


Tags: , , , , , ,


# Posted in: Database Hacking, Web Hacking | * 6 Comments


Recent in Database Hacking:
- The Mole – Automatic SQL Injection SQLi Exploitation Tool
- sqlsus 0.7.1 Released – MySQL Injection & Takeover Tool
- w3af v1.1 Released For Download – Web Application Attack & Audit Framework

Related Posts:
- Bsqlbf V2 – Blind SQL Injection Brute Forcer Tool
- Netsparker Community Edition – Web Application Security Scanner
- FG-Injector – SQL Injection & Proxy Tool

Most Read in Database Hacking:
- Pangolin – Automatic SQL Injection Tool - 54,572 views
- bsqlbf 1.1 – Blind SQL Injection Tool - 51,221 views
- Absinthe Blind SQL Injection Tool/Software - 35,471 views

Advertise on Darknet


6 Responses to “Comprehensive SQL Injection Cheat Sheet”

  1. backbone 5 June 2007 at 7:44 am Permalink

    it’s a great cheat sheet, but it very heavely based on sql and ms sql servers… the most killer stuff (chapter 12) has only 2-3 sub chapters where there are discused also mysql injection codes… but if you need sql and ms sql injection codes, this is the best that I have seen… it’s also the first when you search on google “sql injection cheat sheet” :)

  2. Torvaun 5 June 2007 at 8:20 am Permalink

    Excellent, one more resource that I didn’t already have in quality. Darknet strikes again!

  3. Daniel 5 June 2007 at 10:10 pm Permalink

    I actually learned how to do manual SQL injections from this thing and the links provided. like 3 months ago maybe.

    Its sweet.

    I just copied and pasted code, then started to understand it.

  4. J. Lion 12 February 2008 at 6:34 pm Permalink

    Good Resource (bookmarked)

  5. Pantagruel 13 February 2008 at 1:45 am Permalink

    Indeed a very nice cheat sheet. Am not really into databse pentesting, but we will have a shake down of an in-house generated db soon. Guess I’ll have to check this cheat sheet and do some trying.

  6. eM3rC 13 February 2008 at 2:40 am Permalink

    Bookmarked and on my list of things to study.

    @Pantagruel
    If you decided to become a black hat I bet all hell would break loose ;P