GreenSQL

I finally finished coding for the SQL injection test page. I coded it as a drupal plugin. This SQL Injection page could be used to evaluate SQL protection using GreenSQL database firewall. In addition all SQL queries blocked are shown in demo version of GreenSQL installed at this site. You can reach SQL injection test page using the following url:

http://www.greensql.net/sql-injection-test

When you will open this page you will get a regular login page. In order to proceed you need to provide username and password. Username and password are used by the backend script to execute the following SQL query:

SELECT * FROM user WHERE name = '$USERNAME' AND pwd=SHA('$PASSWORD')

You just need to provide username and password that will bypass GreenSQL protection engine.

Happy hacking !!!