更新时间：2021-06-18 18:34:39
封面
版权信息
Why subscribe?
Contributors About the authors
About the reviewers
Packt is searching for authors like you
Preface
Section 1: (No)SQL Injection in Theory
Chapter 1: Structured Query Language for SQL Injection
Technical requirements
An overview of SQL – a relational query language
The syntax and logic of SQL
Security implications of SQL
Weaknesses in the use of SQL
SQL for SQL injection – a recap
Summary
Questions
Chapter 2: Manipulating SQL – Exploiting SQL Injection
Exploitable SQL commands and syntax
Common SQL injection commands and manipulation
Not only SQL injection – non-relational repositories
The injection vulnerability in non-relational repositories
Wrapping up – (No-)SQL injection in theory
Section 2: SQL Injection in Practice
Chapter 3: Setting Up the Environment
Understanding the practical approach and introducing the main tools
Overview of the OWASP BWA project
The attacker – configuring your client machine
The target – configuring your target web applications
The target – configuring your target-emulated devices
Operating the lab
Chapter 4: Attacking Web Mobile and IoT Applications
Attacking traditional web applications– manual techniques
Attacking traditional web applications – automated techniques
Attacking mobile targets
Attacking IoT targets
Further reading
Chapter 5: Preventing SQL Injection with Defensive Solutions
Understanding general weaknesses and SQL injection enablers
Treating user input
Sanitization and input control
Defending against SQL injection – code-level defenses
Defending against SQL injection – platform-level defenses
Chapter 6: Putting It All Together
SQL injection – theory in perspective
SQL injection – practice in perspective
SQL injection and security implications – final comments
Assessments
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Other Books You May Enjoy
Leave a review - let other readers know what you think
