Update for 28-02-22 16:00
This commit is contained in:
parent
9630135b9f
commit
5650ddb8ac
@ -6,7 +6,6 @@ network, with caching and other optimizations.
|
|||||||
== Database Design Principle ==
|
== Database Design Principle ==
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
== SQL ==
|
== SQL ==
|
||||||
|
|
||||||
See [[../lang/sql]]
|
See [[../lang/sql]]
|
||||||
|
@ -53,6 +53,8 @@ Hiding information
|
|||||||
Try setting the HTTP `Host` header value to `internal-ip:80` where internal ip
|
Try setting the HTTP `Host` header value to `internal-ip:80` where internal ip
|
||||||
is the ip address of a device inside of the target network
|
is the ip address of a device inside of the target network
|
||||||
|
|
||||||
|
* [[sqli]]
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
9
tech/sqli.wiki
Normal file
9
tech/sqli.wiki
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
= SQLI =
|
||||||
|
|
||||||
|
SQLI or SQL injection is a type of attack where sql is placed into a field in
|
||||||
|
an application, as is directly passed to a DBMS.
|
||||||
|
|
||||||
|
An attack typically works by prematurely terminating a text string and
|
||||||
|
appending a new command. Because the inserted command may have additional
|
||||||
|
strings appended to it before it is executed, SQLI attack string generally end
|
||||||
|
with a comment or `--`.
|
Loading…
Reference in New Issue
Block a user