Mastering Kali Linux for Web Penetration Testing

Types of SQLI

Given how diverse SQL is and how many ways there are to implement it, it stands to reason there will be some different ways to implement SQLI. Like XSS, there are a couple of ways we can look at this, but SQLI can vary greatly, and thus can be characterized in different ways. Rather than looking at their persistence and location, as in XSS, we can differentiate SQLI by looking at a few tells or characteristics:

• The way in which the SQLI is delivered (via forms, drop-downs, cookie manipulation, URL mods, and so on)
• The type of input we submit in the first place (strings versus values)
• How we receive the data back (also called the data extraction channel)
• How the response is crafted (returning an error or otherwise hiding any ...