Following the previous post by Nate, once you have successfully exploited an SQLi vulnerability and dumped the database for a particular website, you will probably want to do more than just log in to an administrative control panel. It’s no secret, yet somehow many people simply do not know what to do with a website once they have compromised the database and gained admin credentials to the control panel (phpmyadmin, webstore, etc). Today I will tell you how to upload ...

SQL (Standard Query Language) is a language used to query databases. SQL databases are also one of the most commonly exploited applications in Application Security. Database admins commonly misconfigure their databases from a security standpoint. Sometimes purely for performance, other times because they just don’t care or aren’t aware.

In SQLI, we inject SQL code into the website in order to return valuable information about it’s database(s) and access information stored within.

I have included some hand-selected & recent tutorials to give you ...