Vulnerability Testing Tool for Sql Injection Attacks a Project Report

Vulnerability Testing Tool For SQL Injection Attacks

A PROJECT REPORT submitted by

ADITYA PATIL (ROLL NO.:6151) KIRIT FERNANDES (ROLL NO.:6128) KUNJESH SHAH (ROLL NO.:6177)

in partial fulfillment for the award of the degree of BACHELOR OF ENGINEERING IN INFORMATION TECHNOLOGY

Department of Information Technology Fr. Conceicao Rodrigues College Of Engg Fr. Agnel Ashram, Bandstand, Bandra (W), Mumbai - 400050 October - 2013

CERTIFICATE

Certified that this project report ”Vulnerability Testing Tool For SQL Injection Attacks” is the bonafide work of ”Aditya Patil(6151), Kirit Fernandes(6128) and Kunjesh Shah(6177)” who carried out the project work under my supervision.

Certified by

Internal Guide Prof. Saurabh Kulkarni Information Technology

Principal Dr. S. Unnikrishnan

HOD Prof. M. Sharma Information Technology

Collage Seal ............................ Internal Examiner .............................. External Examiner

Abstract

SQL (Structured Query Language) is a common language used to insert, retrieve, update and delete data from the databases. When we enter our information in the input fields provided on the web form of a Web Application, it forms a part of an SQL query written at the backend, to be executed on the database. An attacker can however, input illegitimate SQL code through the front end of the Web application and gain access to information in the database. This is an example of an SQL Injection Attack which is a serious data security threat.We propose to create a security application that can find the vulnerabilities and threats that a database system is prone to, which will cover all the Injection attacks that are presently known. We will also be generating report based on the queries fired and their corresponding results.

Acknowledgement

We have great pleasure in presenting the report on ”Vulnerability Testing Tool For SQL Injection Attacks” I take this opportunity to express my sincere thanks towards the guide Prof....