Discovering sql vulnerabilities with Python tools

This section explains how to test whether a website is safe from SQL injection using the sqlmap penetration-testing tool. sqlmap is an automated tool for finding and exploiting SQL injection vulnerabilities that inject values in the parameters of the queries.

Introduction to SQL injection

OWASP Top 10 put injection as the #1 risk. If an application has a SQL injection vulnerability, an attacker could read the data in the database. Including confidential information and hashed passwords (or worse, the application keeps the passwords in plain text).

SQL injection is a technique that is used to steal data by taking advantage of a non-validated input vulnerability. It is a code...