Busca automatizada de vulnerabilidades SQL Injection em aplicações web

Abstract

Technology advances at a pace we can hardly keep up with and the increasingly search for facilities in certain services contributes to the gain in popularity of web applications among companies. The acquisition of these products are made from contracting services, however not all employees uses the best programming practices in companies that develop this type of product. A large amount of web vulnerabilities are exploited each day and attacks are becoming more frequent due to the ease introduced by the hacker tools. Identifying main web vulnerabilities makes possible the establishment of countermeasures and ensure the security of the applications, In this work, a capable software was developed, it can identified the vulnerability SQL Injection in one or more targets through the automated testing of different payload.