what is Code Injection?

-

what is Code Injection?


"Code Injection is an exploitation of a computer bug, which usually caused by processing invalid data. It is a kind of attack used by hackers to exploit mainly in databases and software applications."

Code Injection as the name implies is a sort of online attack used by hackers or intruders to exploit mainly in databases and applications. This attack takes place while computer generates a bug on processing invalid data, which deviates from code standardization. There are several types of code injection attacks which are used by hackers to exploit.

  1. SQL Injection
  2. Shell injection
  3. Script injection (Cross Site Scripting)
  4. Dynamic evaluation attack

how does it work?


Code Injection basically done through web pages, or web forms. For instance, login page is used to send and exploit with databases on to the servers. Malicious code is sent by the hacker or intruder to inject it into data base which generates an error and display an error message on hacker’s machine with database attributes and entities. This information is used by hackers to exploit in databases and applications.
You can check my previous post on SQL Injection and Script injection (Cross Site Scripting)for better understanding. If you have any doubts, feel free to shout at me and leave your comments.

Please keep learning from computerflicks, because it is beyond computing.

Comments

Post a Comment

Popular posts from this blog

How do you host your website on free web hosting services or free web hosting sites?

-
What is web hosting? If you have a website, which is basically a collection of static or dynamic web pages and you want to make your site data public then you need a server which can store your pages in it, so that these pages can be invoked by users. You can also use your system as a server to host your site on your own computer. But you have some limitations when you host your site on your own computer as follow: 1. You need high speed internet to make your site available on the internet every time or 24x7. 2. If your site is dynamic and store some sort of user information then you need a proper backup for your site, which is costly. The alternate of the above process is to host your site on the paid or free web hosting companies . There is a list of paid and free hosting companies. Paid Service Web Hosting Companies 1. Hostgator.com 2. Bigrocks.com 3. Godaddy.com 4. Bluehost.com Free Service ...
Read more

What is NFC?

-
Image
NFC(Nearest Field Communication) NFC stands for Nearest Field Communication, is a technology included in mobile phones mainly high end smart phones to communicate with the nearest device by means of just tapping your device with another one which is also NFC enabled in order to transmit your data from one device to another in a very fast and efficient way. NFC is more than that in some countries. It is about to replace your debit and credit cards with your mobile phone. Now your mobile phone is going to become more smarter than traditional smart phones. NFC is an advanced version of RFID which stands for Radio Frequency Identification. In future NFC enabled devices would be everywhere to provide you convenience so that you can handle your data transfer, toll tax transactions, shopping in the malls and also from your computer to handle your transaction in few seconds and in many cases without your intervention. This technique is mainly a part of "on the go" technology...
Read more

Meaning of ping, Ip config, Trace-rt and netstat commands in Networking.

-
In the field of networking, sometimes some basic commands are very necessary to keep in mind because they help us to Know a lot of things like how to get the Ip address of a URL?, How to check that there is a connection established between client and server ?, How to trace the route of packets or get the IP address of the routers through your packet is coming ?, How to know your IP and MAC address ? and How to get the IP address of any system connected in a LAN (Local Area Network) ? So let me explain each of them one by one in this post. PING PING stands for Packet Internet Gopher and it is a utility software of windows operating system and often used to check the connection establishment between your PC and server e.g, it may your ISP's (Internet Service Provider) Server, if you are unable to use Internet while using broadband service you can ping your ISP server to get the connection. Basically it is used to estab...
Read more