Mastering Kali Linux for Web Penetration Testing

A crash course in DBs gone bad

Relational databases provide a table-like framework within which data is stored. SQL is the syntax by which we read and write to these tables, and websites can allow their users to render useful data by building a query and subsequently presenting the results. What could ever go wrong?

Well, many databases are instantiated by system administrators or engineers without a background in the particular database technology. Chances are your technophobe relatives have even installed a database as the underlying component of an application on their own personal computer. And chances are just as high that whoever embedded the database in a larger application did so without delving too far into the detailed hardening ...