SQL-injection vulnerability scanning tool for automatic creation of SQL-injection attacks

Abstract

Securing the web against frequent cyber attacks is a big concern as attackers usually intend to snitch private information, financial information, deface and damages websites to prove their hacking capabilities. This type of vandalism may drive many corporations that conduct their business through the web to suffer financial and reputation damages. One of the most dangerous cyber attacks is the Structured Query Language (SQL)-injection attack, whereby this type of attack can be launched through the web browsers. The vulnerability of SQL-injection attack can be attributed to inappropriate programming practice by the website developers, which leaves a lot of doors widely open for the attackers to exploit these and gaining access to confidential information that resides in the website server databases. In order to address this vulnerability, it must be feasible to detect the vulnerability and enhance the coding structure of the website to avoid being an easy victim to this type of cyber attacks. Detecting the SQL-injection vulnerability requires the development of a powerful tool that can automatically create SQLinjection attacks using efficient features (different attacking patters) to detect the vulnerability of the websites. This paper discuss the development of a new web scanning (MySQLlInjector) tool with enhanced features that will be able to conduct efficient penetration test on PHP (started as Personal Home Page but now widely used as Hypertext Preprocesses) based websites to detect SQL injection vulnerabilities. This tool will automate the penetration test process, to make it easy even for those who are not aware familiar about hacking techniques. BackgroundPenetration testing or web auditing is one of the most important topics that security researchers are concerned about. It aims to prove the effectiveness of the website security system because application level attacks rank at the top of nowadays cyber attacks as these are preferred by attackers/hackers. The philosophy behind web auditing is to ensure having a single entry point to web applications by performing penetration tests represented by conducting sophisticated attacks on websites. Having more than one entry point to the system will be considered as a security flaw that attracts potential hackers to exploit it. Moreover, penetration testing covers checking against a wide range of web vulnerabilities which are related to web application level vulnerabilities such as cross-site-scripting (XSS),

A Regeneration Model for Mitigation Against Attacks on HTTP Servers for Mobile Wireless Networks

“…Ref. [17] designed an SQLi scanning model using the MySQL injector tool that can easily conduct penetration tests on a PHP-based website. The tool contains four developmental phases in which phase one is called Inception.…”

Study the Best PenTest Algorithm for Blind SQL Injection Attacks

“…If it is wrong, then the website page has a very significant different characteristic (W. G. Halfond, Viegas, & Orso, 2006). Research on Blind SQL injection was carried out by Ali et al with an application called MySQLInjector that scans website servers to detect hidden SQL vulnerable gaps that are efficient in penetrating their targets (Ali, Shakhatreh, Abdullah, & Alostad, 2011). MySQLInjector has three Blind SQL features, including Blind SQL Injection based on True/False response, True/Error response and Order by.…”

Web Application Reinforcement via Efficient Systematic Analysis and Runtime Validation (ESARV)

“…Penetration testing tools such as MySQLInjector [13], V1p3R (Viper) [14], Sania [15], SAFELI [16], WAVES [17], [18], and [19] gather information from the web application and in order to analyze the application's response, they inject attacks according to the information gathered. V1p3R uses stored error patterns, and Sania uses SQL parse tree comparison for SQLIA detection.…”