index.html

---
layout: default
description: A one stop resource for fully identifying, exploiting, and escalating SQL injection vulnerabilities across various Database Management Systems.
title: NetSPI SQL Injection Wiki
---

<h2 id="header">Welcome to the NetSPI SQL Injection Wiki!</h2>
<div id="homeWrapper">
  <p class="readableText">This wiki's mission is to be a one stop resource for fully identifying, exploiting, and escalating SQL injection vulnerabilities across various Database Management Systems (DBMS). This wiki assumes you have a basic understanding of SQL injection, please
    go <a href="https://www.owasp.org/index.php/SQL_Injection" rel="noopener" target="_blank">here</a> for an introduction if you are unfamiliar.</p>
  <p class="readableText">Below is an outline of the wiki's structure, laid out in the order of a normal escalation path. Certain queries may be version specific.</p>
  <h3>Step 1: <a href="{{site.pagebase}}/detection">Injection Detection</a></h3>
  <h3>Step 2: <a href="{{site.pagebase}}/dbmsIdentification/">DBMS Identification</a></h3>
  <h3>Step 3: <a href="{{site.pagebase}}/injectionTypes/">Injection Types</a></h3>
  <h3>Step 4: <a href="{{site.pagebase}}/injectionTechniques/">Injection Techniques</a></h3>
  <h3>Step 5: <a href="{{site.pagebase}}/attackQueries/">Attack Queries</a></h3>
  <p></p>
  <h3>Contributing</h3>
  <p>Please feel free to submit pull requests or issues on our <a href="https://github.com/NetSPI/SQLInjectionWiki" target="_blank" rel="noopener">Github</a> if you notice something that is missing or inaccurate.</p>

</div>