你最狡猾的代码注入攻击PHP是什么？

Question

I am writing an automatic tester for our web application's API. Im trying to break it and expose flaws. So far I am trying:

1. missing parameters
2. additional "guess" parameters (ex: admin=1)
3. malicious parameters: sending something like eval("echo 'injection';"); all encoded in % encoding
4. other classic SQL injection attacks like OR 1=1, comments --

I'm not really trying to go for stuff like drop tables, I dont want to damage our test environment. All of my attacks are more aimed at printing messages so I know I got around our security without deleting information.

Answer 1

I highly recommend that you don't do this yourself. There are tons of different attack vectors and this could be a full time job for quite a long time. It's not something you bang out over a week or two.

Instead go look at Metasploit. It's an awesome pen testing framework. I guarantee anyone that knows what they are doing when trying to hack a site has this. You may as well use the same tools.