|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/sql-injection-tutorial/
课程评论：没有评论
**课程总结：Coursera 数据库安全入门：SQL 注入攻击** 本 Coursera 课程“数据库安全入门：SQL 注入攻击”面向初学者，旨在介绍 SQL 注入攻击的原理、危害及检测方法。 **核心内容：** * **什么是 SQL 注入？** SQL 注入是一种网络安全攻击，攻击者通过向数据库服务器发送特制的 SQL 查询语句，篡改数据库内容。当应用程序未对用户输入进行适当过滤和验证，而是直接将其用于 SQL 查询时，便可能发生此类漏洞。 * **SQL 注入的工作原理：** 在存在漏洞的服务器上，用户提供的参数可以被攻击者利用，从而在后端数据库中执行任意 SQL 代码或命令。 * **课程收获：** 通过本课程的学习，学员将学会： * 识别网站是否易受 SQL 注入攻击。 * 从 Web 应用程序的数据库中提取数据。 * 成功执行数据库攻击。 本课程将通过真实世界的案例，帮助零基础的学员深刻理解 SQL 注入攻击并掌握相应的防御和检测技术。
What is sql injection?A SQL injection is an attack in which the attacker sends a specially crafted SQL query (statement), to a database server and modifies the database as desired. An SQL injection occurs when user input is improperly sanitized before being used in an SQL query.The vulnerability can be exploited by providing input via the user interface, or through hidden fields; however, if user input is used for parameters such as a name or an id, those parameters should be validated as well to make sure that no invalid input is used.SQL Injection: How does it work?In a vulnerable server, a parameter that is supplied by the user can be modified by the attacker in order to run arbitrary SQL code or commands on the back-end database. There are multiple ways of performing this kind of attack.What's in this courseIn this course you will learn how to do SQL injection using a real world example. It's a course for beginners who never did SQL injection before. After completing this course you will be able to detect if a website is vulnerable to SQL injection, be able to get data from the web apps database and compromise a database.
