SQL Injection in Rust; still possible? - Security Research

preview_player
Показать описание
I wanted to know 2 simple questions: can I still get SQL Injection in Rust? What controls are in place to protect against it in SQLx? In the Rust community, we talk about "Rust is secure" but is this from just memory related bugs or other security issues too? Let's setup, test, and find out together if Rust and SQLx have some tricks up their sleeves when it comes to protecting against SQL Injection.

All links and resources can be found on my blog:

Follow me on:

Chapter Time Stamps:
00:00 - Introduction
00:33 - Setup
01:04 - Dependencies
02:39 - Start writing Rust
03:23 - Adding SQLx to project
05:40 - Writing our first query
07:55 - Setting up local database
09:10 - Running our first query
11:20 - Start testing for SQL injection
13:32 - Deep dive into SQLx
16:25 - Rust Macro expansion
16:57 - Causing SQL Injection
20:28 - Testing Wildcards in SQLx
21:29 - Conclusion and Outro

Disclamer(s):
- None of the work in this video was created using AI (script, images, etc.)

Music by:
1. Abstract World - AlexiAction
2. Sweet Love - DayFox

#rust #cybersecurity #research
Рекомендации по теме
Комментарии
Автор

Great! Now i can write unsafe code in Rust. Absolutely what I wanted...

dr.med.janschiefer
Автор

amazing work, really nice that the macro demands string literals!

arcstur
Автор

thats a very nice wallpaper. where can i download it pls?

ic
Автор

Shame, I really hope that sqlx made me a lot of trouble with SQL injections, but now I understand why there are so few questions on internet about troubles with this😂

MrRetro
Автор

Library != Framework. Otherwise, good video.

Avantarius