https://blog.njerumtwaiti.com/tags/sql-injection/ Recent content in Sql-Injection on Njeru Mtwaiti Hugo en Thu, 15 May 2025 00:00:00 +0000 https://blog.njerumtwaiti.com/projects/sqli-scanner/ Thu, 15 May 2025 00:00:00 +0000 https://blog.njerumtwaiti.com/projects/sqli-scanner/ <p>A purpose-built SQL injection detection and exploitation tool designed for web application pentesting engagements. Lighter and more scriptable than sqlmap for targeted assessments.</p> <p><strong>Capabilities:</strong></p> <ul> <li>Error-based injection detection across common databases (MySQL, PostgreSQL, MSSQL, SQLite)</li> <li>Boolean-based blind injection with binary search</li> <li>Time-based blind injection with adaptive delay tuning</li> <li>Cookie, header, and POST body injection points</li> <li>Simple CLI interface for quick integration into recon pipelines</li> </ul> <p><strong>Tech:</strong> Python, requests, argparse</p> <blockquote> <p>Intended for authorized security testing only.</p> https://blog.njerumtwaiti.com/posts/sql-injection-zero-to-shell/ Mon, 10 Feb 2025 00:00:00 +0000 https://blog.njerumtwaiti.com/posts/sql-injection-zero-to-shell/ <p>SQL injection is one of the oldest and most consistently exploited vulnerability classes on the web. It&rsquo;s been in the OWASP Top 10 since 2003. It keeps showing up in real engagements, bug bounty reports, and CTF challenges year after year.</p> <p>This post walks through SQL injection end-to-end — detection, manual exploitation, data extraction, and in some cases, a path to remote code execution.</p> <h2 id="how-it-works"> How It Works <a class="heading-link" href="#how-it-works"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>When a web application constructs a SQL query by directly embedding user input, an attacker can manipulate that query&rsquo;s logic.</p>