Bug Bounty Hunting Essentials

Fundamental exploitation

OK, imagine this initial example. You are a bad student looking to pass your final exams without studying and your best option is finding an SQL injection into the exam system to change your answers.

The most basic feature in any system is consulting information stored in the database, with statements like the following:

    SELECT student_name, average FROM students WHERE kardex= '2004620080';

The preceding line means—give me the student's name and notes, stored in the table called students for the student who has the kardex number 2004620080. As you can see, it is a simple statement but is so useful to know the information about each student.

As you can see, the statement manages the kardex number as a string, not ...