[Owasp-testing] Database Fingerprinting

Dan Cornell dan at denimgroup.com
Tue Dec 15 22:25:11 EST 2009


> I want to do a blackbox testing web application to test from Internet.
> I knew the program language use is PHP but I haven't figured out the
> database being used.
> 
> How do I perform database fingerprinting blackbox testing from
> Internet? Any hint?
> 

Have you been able to retrieve any error messages from the database while testing for SQL injection?

Thanks,

Dan



More information about the Owasp-testing mailing list