Hack Security Pro.pdf - Index of

It is therefore vital to understand that no matter how well a system is configurated at the applicative
level, it can become a real strainer if a CGI program is present on the website. So extra attention has
to be paid to the program codes as well as to how they are used.
4.SQL Injection
SQL injection is a method that can modify an SQL request to bypass authentication, recover data or
delete an SQL database. In the following examples, we will use PHP and a MySQL type database.
These examples also apply to other dynamic languages (e.g. ASP) and other databases (e.g. Oracle,
PostGre, etc...).
For a start, we are going to see how a hacker could bypass an authentication by using the SQL
injection and without knowing the valid login/password. This vulnerability can be used only if the server
(or script) does not filter apostrophes (magic_quotes_gpc=Off) So to test this script you will need a
HTTP server with PHP and Mysql. But you will also need to first create a table in the database with 2
fields (login and pass).
SQL request to create the table:
#
# Table structure for table `writers`
#
CREATE TABLE `writers` (
`id` int(10) NOT NULL auto_increment,
`username` varchar(25) NOT NULL default '',
`password` varchar(25) NOT NULL default '',
PRIMARY KEY (`id`)
) TYPE=MyISAM AUTO_INCREMENT=2 ;
#
# Dumping data for table `writers`
#
INSERT INTO `writers` VALUES (1, 'admin', 'mypass');
The Hackademy DMP -123/209- SYSDREAM