Introduction to SQL Injection

Most web applications use some sort of database as a way of storing information. Quite a lot of these databases are programmed using the Structured Query Language (SQL). Consequently, SQL injection came about as one of the more prevalent vulnerabilities on the internet.

SQL injection works primarily with web applications with a database that takes input from users querying the database for a response.

The aim of an SQL injection technique is either to bypass the SQL query being made and execute malicious code or to have the database dump all its data. As such, pentesters should keenly look for SQL-related vulnerabilities within web applications because the consequences are often disastrous.