Back to home
back to forum
Security

SQL injection capstone

A CSCI 400 group capstone on finding and understanding SQL injection.

DVWASQLMapOWASP ZAPWireshark
POST #001

A group capstone for CSCI 400 at John Jay. We worked against DVWA, a deliberately vulnerable web app, in a lab environment.

Tools

  • DVWA as the target
  • SQLMap for automated injection testing
  • OWASP ZAP for scanning and intercepting requests
  • Wireshark for watching the traffic on the wire
Thread locked · this board is currently read-only.