The Exploit

Notes from the Front Lines of Penetration Testing

Category: Injection Attacks

Discover expert penetration testing insights on injection attacks. Learn how to identify, test, and secure vulnerabilities with Raxis’ proven methods.
  • SQL Injection Attack
    SQLi Series: SQL Timing Attacks for Penetration Testing

    By

    Andrew Trexler
    Andrew Trexler’s SQLi Series is back, demonstrating SQL Timing Attacks using MySQL’s sleep function in Blind SQL Injection attacks for penetration testing.
    Read More
  • SQL Injection
    SQLi Series: An Introduction to SQL Injection for Penetration Testing

    By

    Andrew Trexler
    Raxis’ Andrew Trexler explains what SQL Injection (SQLi) is and how to perform a simple exploit against a web app login page in penetration tests.
    Read More
  • Submit Button
    Hackers See Opportunity Where You See Only a Button

    By

    Brad Herring
    In this post, Raxis VP Brad Herring explains how web proxy tools can turn even simple buttons and check-boxes into avenues for an attack.
    Read More