基于SQL注入的渗透测试研究

Research on penetration testing based on SQL injection

为了提高数据库系统的安全性,防范利用各种数据库漏洞尤其是SQL注入漏洞对数据库发起的攻击,本文分析了基于SQL注入渗透测试的相关技术和渗透方法,并在此基础上提出一个渗透测试的宏观模型,并给出各模块主要功能和渗透流程。

lnorder to improve the security of database system, prevent attacks for database system using avariety of database vulnerability especially SQL injection vulnerability, this paper analyzes related technology, and methods on penetration testing based on SQL injection test, and puts forward a penetration test macro model, and gives the main functions of each module and the penetration process.