A penetration tester is testing a web application login form and suspects it may be vulnerable to SQL injection. Which input would BEST serve as an initial test for basic SQL injection vulnerability?

Question

Accepted Answer

A. admin' OR '1'='1. The input `admin' OR '1'='1` is the classic SQL injection test string. If the login query is constructed without parameterization (e.g., `SELECT * FROM users WHERE username='$input'`), this input manipulates the WHERE clause logic to always be true (`OR '1'='1`), potentially bypassing authentication and confirming SQL injection vulnerability.

A penetration tester is testing a web application login form and suspects it may be vulnerable to SQL injection. Which input would BEST serve as an initial test for basic SQL injection vulnerability?

Related Questions

Discussion