SQL Injection Attacks Using OWASP Zap Fuzzer

SQL injection (SQLi) is a web security vulnerability that allows an attacker to interfere with the queries that an application makes to its database. It generally allows an attacker to view data that they are not normally able to retrieve.

In this video we're going to attack OWASP Mutillidae using Zap Proxy Fuzzer.

Links

OWASP Zap

#SQLInjection #OWASPZAP #WebSecurity #EthicalHacking #CyberSecurity #PenetrationTesting #AppSec #SecurityTesting #OWASP #WebAppSecurity

[chidaruma_]

Nice to see some content of real value on yt

[HanShengLai]

1:09
I found that in addition to FuzzDB Files, FuzzDB offensize also needs to be installed in order for fuzzDB->attack to appear.

[sathyanarayanansatzsathya]

Is thr any way to integrate this with existing selenium framework and run the scans in backend while ui testcases are being executed?

[velliangirimurugesh]

Nicely explained.. Please help us to learn more functionality in owasp

[dahuynguyenphuc]

I just used owasp zap to check the website and there is an "Alerts" section. I want to get data directly from it, what should I do??

[Joud]

how do i get the page that you enter the username in?

[devil]

Hey, how to add the addon FuzzDB Files from market place, Could see FUZZDB files is available in market place but i am not able to add this addon, can you help me out in adding this?

[chancellenawej]

Can you do it with ldap injection too?