The slide consists of: An explanation for SQL injections. First order and second order SQL injections. Methods: Normal and Blind SQL injections with examples. Examples: Injection using true/false, drop table and update table commands. Prevention using dynamic embedded SQL queries. Conclusion and References.

1. SQL INJECTIONS
By:
PRATEEK CHAUHAN

2. WHAT?
• Technique to hack database.
• Attacker injects commands within an application.
• Done using html forms or URLS.
• SQL is used to corrupt or destroy the database.

3. VULNERABILITY
What’s Vulnerable?
• MySQL
• SQL Server
• PostgreSQL
• HBase
• IBM DB2
• Apache Derby
• RBase
What’s not Vulnerable?
• ORACLE

4. TYPES OF ATTACKS
FIRST ORDER ATTACKS
• Attacker receives desired
results immediately.
• Uses form injection or URL
injection.
SECOND ORDER ATTACKS
• Process in which the
malicious code is injected into
a web based application and
not immediately executed.

5. FIRST ORDER ATTACK: EXAMPLE

6. SECOND ORDER ATTACKS: EXAMPLE

7. METHODS
1. NORMAL SQL INJECTION
• Attacker injects SQL query.
• Sometimes, server returns error page describing the
type and cause in detail.
• Attacker, tries to match his query with the
developer’s query by using info in error message.

8. EXAMPLE
INITIAL URL :
ADDING UNION KEYWORD AHEAD
OF ’ID’ PARAMETER :

10. METHODS
2. BLIND SQL INJECTION
• Similar to normal method, but instead of receiving an
error message, attacker gets a generic page set up by
the developer.
• This makes exploiting data difficult, but not impossible.
• Done by asking a series of true and false questions
through SQL statements.

11. EXAMPLE
CONSIDER A URL :
APPLYING A TRUE QUERY :

12. APPLYING A FALSE QUERY :

13. EXAMPLES
1. 1=1

14. EXAMPLES
2. UPDATE TABLE

15. EXAMPLES
3. DROP TABLE

16. PREVENTION
1. Use Bind Variables
2. Validate The Input
3. Function Security
4. Limit the Open-Ended Input
5. Verify the type of data

17. PREVENTION: Example
• Prepared Statements in Java

18. CONCLUSION

19. REFRENCES
• http://www.programmerinterview.com/index.php/database-
sql/sql-injection-example/
• http://www.javacodegeeks.com/2012/11/sql-injection-in-java-
application.html
• https://www.owasp.org/index.php/Preventing_SQL_Injection_in_Ja
va
• http://stackoverflow.com/questions/9516625/prevent-sql-
injection-attacks-in-a-java-program
• http://www.scribd.com/doc/16661585/SQL-Injection

20. THANK YOU
QUERIES?