SQL injection testing in Testing Fundamentals - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is SQL Injection?

SQL Injection is a security vulnerability where an attacker inserts malicious SQL code into input fields to manipulate the database.

beginner

Why is SQL Injection testing important?

It helps find weaknesses in applications that could allow attackers to access or damage data, protecting user information and system integrity.

beginner

Name a common method to test for SQL Injection.

Entering special characters like ' or " or SQL keywords such as OR 1=1 in input fields to see if the application behaves unexpectedly.

intermediate

What is a parameterized query and how does it help prevent SQL Injection?

A parameterized query separates SQL code from data inputs, so user inputs are treated only as data, not executable code, preventing injection.

intermediate

What is the difference between error-based and blind SQL Injection testing?

Error-based testing looks for database error messages to find vulnerabilities, while blind testing infers vulnerabilities by observing application behavior without error messages.

Which input is commonly used to test for SQL Injection?

A 12345

B Hello World

C ' OR '1'='1

D <script>alert('test')</script>

The input ' OR '1'='1 is a classic SQL Injection test string that can manipulate SQL queries.

What does a parameterized query do?

A Combines user input directly into SQL code

B Separates SQL code from user input

C Encrypts the database

D Deletes user input before processing

Parameterized queries keep SQL code and user input separate to prevent injection attacks.

Which of these is NOT a sign of SQL Injection vulnerability?

A Unexpected database errors shown to users

B Application crashes on special input

C Data leakage through error messages

D Application ignores all user input

Ignoring all user input is not a sign of SQL Injection vulnerability.

Blind SQL Injection testing relies on:

A Application behavior changes without errors

B Network traffic analysis

C User interface design

D Database error messages

Blind SQL Injection tests infer vulnerabilities by observing changes in application behavior without error messages.

Which practice helps prevent SQL Injection?

A Validating and sanitizing user inputs

B Using dynamic SQL with string concatenation

C Displaying detailed database errors to users

D Allowing all user inputs without checks

Validating and sanitizing inputs helps prevent malicious SQL code from being executed.

Explain what SQL Injection is and why it is a security risk.

Think about how user input can change database commands.

Describe two methods to test for SQL Injection vulnerabilities.

Consider how you might check if an application is vulnerable without causing harm.