SQLI - use GOOGLE dorks list to find vulnerable web
sites which are then injected with data to dump the
databases contents so you can view it. SQL injection
is a code injection technique, used to attack data-
driven applications, in which nefarious SQL statements
are inserted into an entry field for execution (e.g.
to dump the database contents to the attacker).[1] SQL
injection must exploit a security vulnerability in an
application's software, for example, when user input
is either incorrectly filtered for string literal
escape characters embedded in SQL statements or user
input is not strongly typed and unexpectedly executed.
SQL injection is mostly known as an attack vector for
websites but can be used to attack any type of SQL
database.

SQL injection attacks allow attackers to spoof
identity, tamper with existing data, cause repudiation
issues such as voiding transactions or changing
balances, allow the complete disclosure of all data on
the system, destroy the data or make it otherwise

Download (1968 KB) Website Link to this page