SQL Injections

1. Using this site http://testphp.vulnweb.com/ I found some nice steps though pages that show how to Sql inject, but you do need to understand Sql programing to understand what is going on. Go ahead and try some of the commands and see if you get the same results.

https://www.hackingarticles.in/manual-sql-injection-exploitation-step-step/

https://sql--injection.blogspot.com/p/sql-injection-tutorial-walkthrough-with.html

2. Try some google hacking codes to find information from this site such as. /default.php?id=1 such as or /artists.php?artist=1 (http://testphp.vulnweb.com/default.php?id=1), if you get any kind of error message it means it can be vulnerable. The second item gives you the output from a table.

3. List some information you were able to find through this help. Were you able to change any of the information?

Step 2 Using ID Serve

In this exercise you will use ID Serve to identify a server type. To perform this exercise, download ID Serve from https://www.grc.com/intro.htm .

Look under Freeware under Utilities

2. When you have downloaded the file, doubleclick the ID Serve application.
4. When prompted, click the Server Query tab.
6. In the field labeled 1, enter the name of the server to target. (Choose 3)
8. Click the Query The Server button.

The utility should return the identification of the web server at the host name provided. Note that in some cases the utility will not return the server type. When this happens, this is more than likely because the remote server has not defined its server tag. In these cases, you will have to use other methods to identify the server. Did you find what type of server is used on a site?

After you look up on both steps, I'm just looking for this questions. Step 1 List some information you were able to find through this help. Were you able to change any of the information? Step 2 Did you find what type of server is used on a site? Don't try to get long answers just basic