prikaz prve stranice dokumenta Napadi umetanjem SQL programskog koda
  Download
PDF 2.23 MB
undergraduate thesis
Napadi umetanjem SQL programskog koda
2021. urn:nbn:hr:122:366663
Bedeković, Nenad
University North
University centre Varaždin
Department of Multimedia, Design and Application

Cite this document

Bedeković, N. (2021). Napadi umetanjem SQL programskog koda (Undergraduate thesis). Koprivnica: University North. Retrieved from https://urn.nsk.hr/urn:nbn:hr:122:366663

Bedeković, Nenad. "Napadi umetanjem SQL programskog koda." Undergraduate thesis, University North, 2021. https://urn.nsk.hr/urn:nbn:hr:122:366663

Bedeković, Nenad. "Napadi umetanjem SQL programskog koda." Undergraduate thesis, University North, 2021. https://urn.nsk.hr/urn:nbn:hr:122:366663

Bedeković, N. (2021). 'Napadi umetanjem SQL programskog koda', Undergraduate thesis, University North, accessed 24 April 2024, https://urn.nsk.hr/urn:nbn:hr:122:366663

Bedeković N. Napadi umetanjem SQL programskog koda [Undergraduate thesis]. Koprivnica: University North; 2021 [cited 2024 April 24] Available at: https://urn.nsk.hr/urn:nbn:hr:122:366663

N. Bedeković, "Napadi umetanjem SQL programskog koda", Undergraduate thesis, University North, Koprivnica, 2021. Available at: https://urn.nsk.hr/urn:nbn:hr:122:366663

Please login to the repository to save this object to your list.
Metadata
TitleNapadi umetanjem SQL programskog koda
Title (english)SQL injection attacks
AuthorNenad Bedeković
MentorLadislav Havaš (mentor)
Committee memberTomislav Horvat (predsjednik povjerenstva)
Committee memberLadislav Havaš (član povjerenstva)
Committee memberDražen Crčić (član povjerenstva)
GranterUniversity North
(University centre Varaždin)
(Department of Multimedia, Design and Application)
Koprivnica
Defense date and country2021-09-28, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Graphic Technology
Processes of Graphic Reproduction
Abstract
Završni rad upoznaje čitatelje s glavnim aspektima napada umetanjem SQL koda. Prolazi se kroz temelje kao osnovni način rada web aplikacija, SQL jezik i baze podataka. Internetom kruži velik broj namjerno ranjivih web aplikacija koje služe kao legalni testni teren za prakticiranje napada umetanjem SQL koda. U radu će biti prikazane tehnike napada na Acunetix testnu web aplikaciju napisanu korištenjem skriptnog jezika PHP i relacijske baze podataka MySQL. U praktičnom dijelu sama izvedba napada uvelike ovise o sustavu za upravljanje bazama podataka pa je prikazana sintaksa namijenjena samo za MySQL sustav. Za primjer automatizirane izvedbe napada je korišten program SQLmap u Linux Kali virtualiziranom okruženju. U sklopu rada se nalaze i smjernice oko sigurnosti za sve programere koji pokušavaju zaštititi svoje baze podataka.
Abstract (english)
The final paper introduces readers to the main aspects of SQL injection attacks. It briefly touches the basics of web application architecture, SQL language and databases. A large number of intentionally vulnerable web applications are circulating on the Internet that serve as a legal test ground for practicing SQL injection attacks. For demonstration purposes the attacks will target an Acunetix test web application created using PHP backend language that uses MySQL as the relational database management system. In the practical part, the execution of the attack itself largely depends on the database management system, so the displayed syntax is intended only for the MySQL database management system. Example of an automated attack will be executed on SQLmap in a Linux Kali virtualized environment. The paper also includes security guidelines for all developers trying to protect their databases.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:122:366663
Study programmeTitle: Graphical Studies: Multimedia, Design and Application
Study programme type: professional
Study level: undergraduate
Academic / professional title: stručni/a prvostupnik/prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka multimedijske i grafičke tehnologije (stručni/a prvostupnik/prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka multimedijske i grafičke tehnologije)
Type of resourceText
File originBorn digital
Access conditionsOpen access
Terms of useLicence In copyright icon
Created on2022-03-22 13:03:26