Summary

In this chapter, you learned about two major types of web attacks, SQL injection, and XSS. In SQL injection, you learned how to find the admin login page using Python script. There are lots of different queries for SQL injection and, in this chapter, you learned how to crack usernames and passwords based on a tautology. In another attack of SQL injection, you learned how to make a comment after a valid username. In the XSS, you saw how to apply XSS exploits to the form field, and in the mohit.xss file, you saw how to add more exploits.