System Forensics, Investigation, and Response, 3rd Edition

Hacking

Hacking is a generic term that has different meanings to different people. In the hacking community, it means to experiment with a system, learning its flaws, in order to better understand the system or to fix the flaws. In common speech, it means breaking into a system. This section uses the latter definition. It is certainly possible to break into a system remotely. Attackers can use a number of techniques to do this. The following sections discuss a few of these techniques.

SQL Injection

SQL injection may be the most common Web application attack. It is based on inserting Structured Query Language (SQL) commands into text boxes, such as the username and password text fields on the logon screen. To understand how SQL injection ...