SlideShare uma empresa Scribd logo
1 de 12
Baixar para ler offline
‫ﺣﻘﻦ‬
SQL
‫ﻫﺠﻮﻡ‬
‫ﻗﺎﻋﺪﺓ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﻣﺘﺮﺟﻢ‬
‫ﻣﻦ‬
‫ﺍﻹﻧﺠﻠﻴﺰﻳﺔ‬
‫ﺇﻟﻰ‬
‫ﺍﻟﻌﺮﺑﻴﺔ‬
-
www.onlinedoctranslator.com
‫ﺃﻫﺪﺍﻑ‬
‫ﺍﻟﻬﺠﻮﻡ‬
‫ﺍﻟﺴﻴﺒﺮﺍﻧﻲ‬
-
-
-
-
-
-
-
-
-
‫ﺃﻭ‬
‫ﻓﻘﻂ‬
‫ﻟﻠﻘﻴﺎﻡ‬
!‫ﺑﺬﻟﻚ‬
‫ﻧﻘﻮﺩ‬
‫ﺳﻠﻄﺔ‬
‫ﻣﺮﺍﻗﺒﺔ‬
‫ﺷﻬﺮﻩ‬
‫ﺍﻋﻼﻣﻴﻪ‬
‫ﺍﻧﺘﻘﺎﻡ‬
‫ﺍﻟﻤﻘﺮﻣﺸﺎﺕ‬
‫ﺍﻟﺘﻌﻠﻢ‬
‫ﺍﻟﺤﻤﺎﻳﺔ‬
‫ﺍﻟﻤﺴﺘﻘﺒﻠﻴﺔ‬
/
‫ﺍﺧﺘﺒﺎﺭ‬
‫ﺍﻻﺧﺘﺮﺍﻕ‬
‫ﺍﻟﻤﺤﺘﻮﻯ‬
-
‫ﻣﺎ‬
‫ﻫﻮ‬
SQL
-
‫ﻣﺎ‬
‫ﻫﻮ‬
‫ﺣﻘﻦ‬
SQL
-
‫ﺃﻧﻮﺍﻉ‬
‫ﻫﺠﻮﻡ‬
SQL
‫ﺑﺎﻟﺤﻘﻦ‬
‫ﻣﻘﺪﻣﺔ‬
‫ﻓﻲ‬
SQL
-
RDBMS(.
)
‫ﻫﻲ‬
‫ﻟﻐﺔ‬
‫ﺑﺮﻣﺠﺔ‬
‫ﺫﺍﺕ‬
‫ﺃﻏﺮﺍﺽ‬
‫ﺧﺎﺻﺔ‬
‫ﻣﺼﻤﻤﺔ‬
‫ﻹﺩﺍﺭﺓ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﺍﻟﻤﻮﺟﻮﺩﺓ‬
‫ﻓﻲ‬
‫ﺃﻧﻈﻤﺔ‬
‫ﺇﺩﺍﺭﺓ‬
‫ﻗﻮﺍﻋﺪ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﺍﻟﻌﻼﺉﻘﻴﺔ‬
SQL
-
‫ﻳﺘﻀﻤﻦ‬
‫ﻧﻄﺎﻕ‬
SQL
‫ﺇﺩﺧﺎﻝ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﻭﺍﻻﺳﺘﻌﻼﻡ‬
‫ﻭﺍﻟﺘﺤﺪﻳﺚ‬
‫ﻭﺍﻟﺤﺬﻑ‬
‫ﻭﺇﻧﺸﺎء‬
‫ﺍﻟﻤﺨﻄﻂ‬
‫ﻭﺗﻌﺪﻳﻠﻪ‬
‫ﻭﺍﻟﺘﺤﻜﻢ‬
‫ﻓﻲ‬
‫ﺍﻟﻮﺻﻮﻝ‬
‫ﺇﻟﻰ‬
.‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﺣﻘﻦ‬
SQL
.1
‫ﻓﺉﺔ‬
‫ﻣﻦ‬
‫ﻫﺠﻤﺎﺕ‬
‫ﺣﻘﻦ‬
‫ﺍﻟﺘﻌﻠﻴﻤﺎﺕ‬
، ‫ﺍﻟﺒﺮﻣﺠﻴﺔ‬
‫ﺣﻴﺚ‬
‫ﻳﺘﻢ‬
‫ﺗﻀﻤﻴﻦ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﺍﻟﺘﻲ‬
‫ﻳﻮﻓﺮﻫﺎ‬
‫ﺍﻟﻤﺴﺘﺨﺪﻡ‬
‫ﻓﻲ‬
‫ﺍﺳﺘﻌﻼﻡ‬
SQL
‫ﺑﺤﻴﺚ‬
‫ﻳﺘﻢ‬
‫ﺍﻟﺘﻌﺎﻣﻞ‬
‫ﻣﻊ‬
‫ﺟﺰء‬
‫ﻣﻦ‬
‫ﻣﺪﺧﻼﺕ‬
‫ﺍﻟﻤﺴﺘﺨﺪﻡ‬
‫ﻋﻠﻰ‬
‫ﺃﻧﻪ‬
‫ﻛﻮﺩ‬
SQL
.
.1
‫ﺣﻘﻦ‬
SQL
‫ﻫﻮ‬
‫ﺃﺳﻠﻮﺏ‬
‫ﺿﺎﺭ‬
‫ﻻﺳﺘﻐﻼﻝ‬
‫ﺍﻟﺘﻄﺒﻴﻘﺎﺕ‬
‫ﺍﻟﺘﻲ‬
‫ﺗﺴﺘﺨﺪﻡ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﺍﻟﻤﻘﺪﻣﺔ‬
‫ﻣﻦ‬
‫ﺍﻟﻌﻤﻴﻞ‬
‫ﻓﻲ‬
‫ﻋﺒﺎﺭﺍﺕ‬
SQL
.
‫ﻣﻬﺎﺟﻢ‬
‫ﺍﻟﻤﺴﺘﻌﻤﻞ‬
‫ﺍﺟﺘﻴﺎﺯ‬
'
‫ﺃﻭ‬
1
=
--1
.1
.2
.3
.4
.5
‫ﻳﺮﺳﻞ‬
‫ﺍﻟﺘﻄﺒﻴﻖ‬
‫ﺍﻟﻨﻤﻮﺫﺝ‬
‫ﺇﻟﻰ‬
.‫ﺍﻟﻤﺴﺘﺨﺪﻡ‬
‫ﻳﻘﻮﻡ‬
‫ﺍﻟﻤﻬﺎﺟﻢ‬
‫ﺑﺈﺭﺳﺎﻝ‬
‫ﻧﻤﻮﺫﺝ‬
‫ﻣﺰﻭﺩ‬
‫ﺑﺒﻴﺎﻧﺎﺕ‬
‫ﺍﺳﺘﻐﻼﻝ‬
SQL
.
‫ﺍﻟﺘﻄﺒﻴﻖ‬
‫ﻳﺒﻨﻲ‬
‫ﺳﻠﺴﻠﺔ‬
‫ﻣﻊ‬
‫ﺍﺳﺘﻐﻼﻝ‬
.‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﻳﺮﺳﻞ‬
‫ﺍﻟﺘﻄﺒﻴﻖ‬
‫ﺍﺳﺘﻌﻼﻡ‬
SQL
‫ﺇﻟﻰ‬
DB
.
‫ﻳﻨﻔﺬ‬
DB
، ‫ﺍﻻﺳﺘﻌﻼﻡ‬
‫ﺑﻤﺎ‬
‫ﻓﻲ‬
‫ﺫﻟﻚ‬
، ‫ﺍﻻﺳﺘﻐﻼﻝ‬
‫ﻭﻳﺮﺳﻞ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﻣﺮﺓ‬
‫ﺃﺧﺮﻯ‬
‫ﺇﻟﻰ‬
.‫ﺍﻟﺘﻄﺒﻴﻖ‬
‫ﻳﻌﻴﺪ‬
‫ﺍﻟﺘﻄﺒﻴﻖ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
‫ﺇﻟﻰ‬
.‫ﺍﻟﻤﺴﺘﺨﺪﻡ‬
‫ﺟﺪﺍﺭ‬
‫ﺍﻟﺤﻤﺎﻳﺔ‬
.6
‫ﺧﺎﺩﻡ‬
DB
‫ﻗﺎﻋﺪﺓ‬
‫ﺑﻴﺎﻧﺎﺕ‬
‫ﻟﻼﻧﺘﺮﻧﺖ‬
‫ﻣﺜﺎﻝ‬
‫ﺣﻘﻦ‬
SQL
‫ﺃﻧﻮﺍﻉ‬
‫ﻫﺠﻮﻡ‬
SQL
‫ﺑﺎﻟﺤﻘﻦ‬
-
‫ﺃﻧﻮﺍﻉ‬
‫ﻫﺠﻤﺎﺕ‬
SQL
1
(
‫ﻫﺠﻮﻡ‬
‫ﺍﻟﻄﻠﺐ‬
:‫ﺍﻷﻭﻝ‬
‫ﻳﻤﻜﻦ‬-
‫ﻟﻠﻤﻬﺎﺟﻢ‬
‫ﺑﺒﺴﺎﻃﺔ‬
‫ﺇﺩﺧﺎﻝ‬
‫ﺳﻠﺴﻠﺔ‬
‫ﺿﺎﺭﺓ‬
‫ﻭﺍﻟﺘﺴﺒﺐ‬
‫ﻓﻲ‬
‫ﺗﻨﻔﻴﺬ‬
‫ﺍﻟﻜﻮﺩ‬
‫ﺍﻟﻤﻌﺪﻝ‬
‫ﻋﻠﻰ‬
.‫ﺍﻟﻔﻮﺭ‬
2
(
‫ﻫﺠﻮﻡ‬
‫ﺍﻟﺘﺮﺗﻴﺐ‬
:‫ﺍﻟﺜﺎﻧﻲ‬
-
‫ﻳﻘﻮﻡ‬
‫ﺍﻟﻤﻬﺎﺟﻢ‬
‫ﺑﺤﻘﻦ‬
‫ﻣﺨﺰﻥ‬
‫ﺩﺍﺉﻢ‬
)
‫ﻣﺜﻞ‬
‫ﺻﻒ‬
‫ﺍﻟﺠﺪﻭﻝ‬
(
‫ﻭﺍﻟﺬﻱ‬
‫ﻳﻌﺘﺒﺮ‬
ً‫ﺍ‬‫ﻣﺼﺪﺭ‬
ً‫ﺎ‬‫ﻣﻮﺛﻮﻗ‬
.‫ﺑﻪ‬
‫ﻳﺘﻢ‬
‫ﺗﻨﻔﻴﺬ‬
‫ﻫﺠﻮﻡ‬
‫ﺑﻌﺪ‬
‫ﺫﻟﻚ‬
‫ﺑﻮﺍﺳﻄﺔ‬
‫ﻧﺸﺎﻁ‬
.‫ﺁﺧﺮ‬
3
(
‫ﺍﻟﺤﻘﻦ‬
:‫ﺍﻟﺠﺎﻧﺒﻲ‬
‫ﻳﻤﻜﻦ‬-
‫ﻟﻠﻤﻬﺎﺟﻢ‬
‫ﺍﻟﺘﻌﺎﻣﻞ‬
‫ﻣﻊ‬
‫ﺍﻟﻮﻇﻴﻔﺔ‬
‫ﺍﻟﻀﻤﻨﻴﺔ‬
To_Char
()
‫ﻋﻦ‬
‫ﻃﺮﻳﻖ‬
‫ﺗﻐﻴﻴﺮ‬
‫ﻗﻴﻢ‬
‫ﻣﺘﻐﻴﺮﺍﺕ‬
، ‫ﺍﻟﺒﻴﺉﺔ‬
NLS_Date_Format
‫ﺃﻭ‬
NLS_Numeric_Characters
.
‫ﺁﻟﻴﺔ‬
‫ﺍﻟﺤﻘﻦ‬
-
‫ﺍﻟﺤﻘﻦ‬
‫ﻣﻦ‬
‫ﺧﻼﻝ‬
‫ﻣﺪﺧﻼﺕ‬
‫ﺍﻟﻤﺴﺘﺨﺪﻡ‬
-
‫ﺍﻟﺤﻘﻦ‬
‫ﻋﻦ‬
‫ﻃﺮﻳﻖ‬
‫ﺣﻘﻦ‬
‫ﺍﻟﻜﻮﻛﻴﺰ‬
-
‫ﺍﻟﺤﻘﻦ‬
‫ﻣﻦ‬
‫ﺧﻼﻝ‬
‫ﻣﺘﻐﻴﺮﺍﺕ‬
‫ﺍﻟﺨﺎﺩﻡ‬
-
‫ﺍﻟﺤﻘﻦ‬
‫ﻣﻦ‬
‫ﺍﻟﺪﺭﺟﺔ‬
‫ﺍﻟﺜﺎﻧﻴﺔ‬
7
‫ﺍﻟﻄﻠﺐ‬
‫ﺍﻷﻭﻝ‬
‫ﻧﻴﺔ‬
‫ﺍﻟﻬﺠﻮﻡ‬
-
‫ﺗﺤﺪﻳﺪ‬
‫ﻣﺨﻄﻂ‬
‫ﻗﺎﻋﺪﺓ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
-
‫ﺍﺳﺘﺨﺮﺍﺝ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
-
‫ﺇﺿﺎﻓﺔ‬
‫ﺃﻭ‬
‫ﺗﻌﺪﻳﻞ‬
‫ﺍﻟﺒﻴﺎﻧﺎﺕ‬
-
‫ﺗﺠﺎﻭﺯ‬
‫ﺍﻟﻤﺼﺎﺩﻗﺔ‬
‫ﺧﻄﻮﺍﺕ‬
‫ﻟﺤﻘﻦ‬
SQL
-
‫ﺍﻟﺨﻄﻮﺓ‬
1
-
‫ﺍﻓﺘﺢ‬
‫ﺻﻔﺤﺔ‬
techpanda.org
)
‫ﺃﻱ‬
‫ﻣﻮﻗﻊ‬
‫ﺿﻌﻴﻒ‬
(
-
‫ﺍﻟﺨﻄﻮﺓ‬
2
-
‫ﺍﺳﺘﺨﺪﻡ‬
‫ﺍﻟﻤﺪﺧﻼﺕ‬
‫ﺍﻟﺘﺎﻟﻴﺔ‬
‫ﻟﺘﺴﺠﻴﻞ‬
‫ﺍﻟﺪﺧﻮﻝ‬
-
‫ﻋﻨﻮﺍﻥ‬
-‫ﺍﻻﻳﻤﻴﻞ‬
-
‫ﻛﻠﻤﺔ‬
‫ﺍﻟﻤﺮﻭﺭ‬
-
xxx@xxx.xxx
[
-
‫ﺃﻭ‬
1
=
'( 1
xxx
‫ﻛﺸﻒ‬
‫ﻣﻮﻧﻮﺯﻙ‬
‫ﺧﺎﺩﻡ‬
MONOSEK
STEP1-RUN
‫ﺍﻟﺨﻄﻮﺓ‬
2
-
‫ﺟﺎﻧﺐ‬
‫ﺍﻟﻌﻤﻴﻞ‬
-
‫ﺍﻟﺒﺮﻧﺎﻣﺞ‬
‫ﺍﻟﺘﺠﺮﻳﺒﻲ‬
-
‫ﺑﺮﻧﺎﻣﺞ‬
expt_11_sqli

Mais conteúdo relacionado

Destaque

Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
Kurio // The Social Media Age(ncy)
 

Destaque (20)

Skeleton Culture Code
Skeleton Culture CodeSkeleton Culture Code
Skeleton Culture Code
 
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
 
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
 
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
 
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
 
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
 
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
 
Getting into the tech field. what next
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next
 
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
 
How to have difficult conversations
How to have difficult conversations How to have difficult conversations
How to have difficult conversations
 
Introduction to Data Science
Introduction to Data ScienceIntroduction to Data Science
Introduction to Data Science
 
Time Management & Productivity - Best Practices
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
 
The six step guide to practical project management
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
 
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
 
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
 
12 Ways to Increase Your Influence at Work
12 Ways to Increase Your Influence at Work12 Ways to Increase Your Influence at Work
12 Ways to Increase Your Influence at Work
 
ChatGPT webinar slides
ChatGPT webinar slidesChatGPT webinar slides
ChatGPT webinar slides
 
More than Just Lines on a Map: Best Practices for U.S Bike Routes
More than Just Lines on a Map: Best Practices for U.S Bike RoutesMore than Just Lines on a Map: Best Practices for U.S Bike Routes
More than Just Lines on a Map: Best Practices for U.S Bike Routes
 
Ride the Storm: Navigating Through Unstable Periods / Katerina Rudko (Belka G...
Ride the Storm: Navigating Through Unstable Periods / Katerina Rudko (Belka G...Ride the Storm: Navigating Through Unstable Periods / Katerina Rudko (Belka G...
Ride the Storm: Navigating Through Unstable Periods / Katerina Rudko (Belka G...
 

sqlinjection-181028165004fffffff.en.ar.pdf