Question

Task 3.2: SQL Injection Attack on UPDATE Statement — modify other people’ password

Answer 1

SQL Injection :

The SQL injection is the special type of code injection technique that is used to exploit the types of security vulnerability that is been occurring in the database layer of the any kind of application.

There is a process of an attack technique that is used to exploit the websites by altering the back end of the SQL statements with the process of Manipulating application Input.

Mainly it refers the particular scenario in which the function of the Incorrectly validated or the some types of the works are non validated those are string literals are specifically divided into concentrated into the form of dynamic.

There are mainly two types of SQL Injections are present in the SQL. Those are.

First-order Injection

Second Order Injection

First Order Injection :

The Main aim of the attackers is to inject the SQL Statements By providing the some crafted user input through the HTTP of the GET and POST methods.

It can also take the cookies, and the collection of the services of the server variables that contains the HTTP, Headers of the Network And some other type of the environmental parameters.

Here the sub query that can be added to the existing content of the statement.

It is the process of the Query Condition such as OR 1 = 1 and that is helped to bringing back the data from the specific type of table.

Second Order Injection :

Firstly the attackers are Inject the SQL statement Into the Specific persistence storage that is nothing but the record of the table and that can be considered as the one of the Trusted source.

But it could indirectly trigger the attack whenever the same input that can be used in some time later.

The attacker modifies his passowrd later by using the some Password SQL update methods. Those are.

SQL INJECTION UPDATE statement :

UPDATE tablename

SET password = " " + new _pass + " "

WHERE username = " " + AND password = " " + old_pass + " "

If incase of the name of the attacker he can be logged into as maddy then,

UPDATE passwordtable

SET password = " New Pass "

WHERE username = " maddy " AND password = " old pssword " .