Re: [sqlalchemy] SQL injection
I don't understand. SQLAlchemy will not help you "generate SQL injections". It's just a library for talking to databases. Applications that *use* SQLAlchemy might be vulnerable to SQL injections if they are careless, but if you use it in the recommended way, SQL statements are parameterized and the parameters are sent separately, so attackers can't change the syntactic form of the statement. Simon On Wed, Jul 1, 2020 at 4:21 PM divyashi...@gmail.com wrote: > > SQL injections in the sense , malacious sql statements. or paylaod . > > On Wednesday, July 1, 2020 at 10:04:47 AM UTC-5 divyashi...@gmail.com wrote: >> >> Hi Simon , I am m trying to generate sql injections(in band SQLi and >> outband sqli) for data analysis using sql code genrator Is there any sql >> query generator library in python that will help me in generating sql >> injections? or can I use SQLAlchemy for that purpose >> I have tried to use the SQL penetration testing tools , but I am not happy >> with the results . Is there any way that I can generate SQL injections >> besides manual testing and pen testing . >> Any information is appreciated >> >> On Wednesday, July 1, 2020 at 4:34:10 AM UTC-5 Simon King wrote: >>> >>> Hi, >>> >>> What do you mean by "SQL injection"? >>> >>> Thanks, >>> >>> Simon >>> >>> On Tue, Jun 30, 2020 at 10:12 PM Divya Shivakumar >>> wrote: >>> > >>> > Hey how do i generate new sql injections from sqlalchemy . Any links or >>> > information is much appreciated >>> > >>> > -- >>> > SQLAlchemy - >>> > The Python SQL Toolkit and Object Relational Mapper >>> > >>> > http://www.sqlalchemy.org/ >>> > >>> > To post example code, please provide an MCVE: Minimal, Complete, and >>> > Verifiable Example. See http://stackoverflow.com/help/mcve for a full >>> > description. >>> > --- >>> > You received this message because you are subscribed to the Google Groups >>> > "sqlalchemy" group. >>> > To unsubscribe from this group and stop receiving emails from it, send an >>> > email to sqlalchemy+...@googlegroups.com. >>> > To view this discussion on the web visit >>> > https://groups.google.com/d/msgid/sqlalchemy/fa4bac85-0fc2-42b5-b47b-11a35bfd7aa1o%40googlegroups.com. > > -- > SQLAlchemy - > The Python SQL Toolkit and Object Relational Mapper > > http://www.sqlalchemy.org/ > > To post example code, please provide an MCVE: Minimal, Complete, and > Verifiable Example. See http://stackoverflow.com/help/mcve for a full > description. > --- > You received this message because you are subscribed to the Google Groups > "sqlalchemy" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to sqlalchemy+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/sqlalchemy/1dab490f-564b-4fc1-8a56-8becd3f13fd8n%40googlegroups.com. -- SQLAlchemy - The Python SQL Toolkit and Object Relational Mapper http://www.sqlalchemy.org/ To post example code, please provide an MCVE: Minimal, Complete, and Verifiable Example. See http://stackoverflow.com/help/mcve for a full description. --- You received this message because you are subscribed to the Google Groups "sqlalchemy" group. To unsubscribe from this group and stop receiving emails from it, send an email to sqlalchemy+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sqlalchemy/CAFHwexc6d40deuG-p6XXyYLT0JLB%3DqHw2s8Ej1GpkFke2_BjUA%40mail.gmail.com.
Re: [sqlalchemy] SQL injection
SQL injections in the sense , malacious sql statements. or paylaod . On Wednesday, July 1, 2020 at 10:04:47 AM UTC-5 divyashi...@gmail.com wrote: > Hi Simon , I am m trying to generate sql injections(in band SQLi and > outband sqli) for data analysis using sql code genrator Is there any sql > query generator library in python that will help me in generating sql > injections? or can I use SQLAlchemy for that purpose > I have tried to use the SQL penetration testing tools , but I am not happy > with the results . Is there any way that I can generate SQL injections > besides manual testing and pen testing . > Any information is appreciated > > On Wednesday, July 1, 2020 at 4:34:10 AM UTC-5 Simon King wrote: > >> Hi, >> >> What do you mean by "SQL injection"? >> >> Thanks, >> >> Simon >> >> On Tue, Jun 30, 2020 at 10:12 PM Divya Shivakumar >> wrote: >> > >> > Hey how do i generate new sql injections from sqlalchemy . Any links or >> information is much appreciated >> > >> > -- >> > SQLAlchemy - >> > The Python SQL Toolkit and Object Relational Mapper >> > >> > http://www.sqlalchemy.org/ >> > >> > To post example code, please provide an MCVE: Minimal, Complete, and >> Verifiable Example. See http://stackoverflow.com/help/mcve for a full >> description. >> > --- >> > You received this message because you are subscribed to the Google >> Groups "sqlalchemy" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an email to sqlalchemy+...@googlegroups.com. >> > To view this discussion on the web visit >> https://groups.google.com/d/msgid/sqlalchemy/fa4bac85-0fc2-42b5-b47b-11a35bfd7aa1o%40googlegroups.com >> . >> > -- SQLAlchemy - The Python SQL Toolkit and Object Relational Mapper http://www.sqlalchemy.org/ To post example code, please provide an MCVE: Minimal, Complete, and Verifiable Example. See http://stackoverflow.com/help/mcve for a full description. --- You received this message because you are subscribed to the Google Groups "sqlalchemy" group. To unsubscribe from this group and stop receiving emails from it, send an email to sqlalchemy+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sqlalchemy/1dab490f-564b-4fc1-8a56-8becd3f13fd8n%40googlegroups.com.
Re: [sqlalchemy] SQL injection
Hi Simon , I am m trying to generate sql injections(in band SQLi and outband sqli) for data analysis using sql code genrator Is there any sql query generator library in python that will help me in generating sql injections? or can I use SQLAlchemy for that purpose I have tried to use the SQL penetration testing tools , but I am not happy with the results . Is there any way that I can generate SQL injections besides manual testing and pen testing . Any information is appreciated On Wednesday, July 1, 2020 at 4:34:10 AM UTC-5 Simon King wrote: > Hi, > > What do you mean by "SQL injection"? > > Thanks, > > Simon > > On Tue, Jun 30, 2020 at 10:12 PM Divya Shivakumar > wrote: > > > > Hey how do i generate new sql injections from sqlalchemy . Any links or > information is much appreciated > > > > -- > > SQLAlchemy - > > The Python SQL Toolkit and Object Relational Mapper > > > > http://www.sqlalchemy.org/ > > > > To post example code, please provide an MCVE: Minimal, Complete, and > Verifiable Example. See http://stackoverflow.com/help/mcve for a full > description. > > --- > > You received this message because you are subscribed to the Google > Groups "sqlalchemy" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to sqlalchemy+...@googlegroups.com. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/sqlalchemy/fa4bac85-0fc2-42b5-b47b-11a35bfd7aa1o%40googlegroups.com > . > -- SQLAlchemy - The Python SQL Toolkit and Object Relational Mapper http://www.sqlalchemy.org/ To post example code, please provide an MCVE: Minimal, Complete, and Verifiable Example. See http://stackoverflow.com/help/mcve for a full description. --- You received this message because you are subscribed to the Google Groups "sqlalchemy" group. To unsubscribe from this group and stop receiving emails from it, send an email to sqlalchemy+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sqlalchemy/6b223ba9-7907-4cf6-8e39-defa0ff79c35n%40googlegroups.com.
Re: [sqlalchemy] SQL injection
Hi simon, i need to generate , sql injections ( in band SQLi and outband sqli ) for data analysis using sql code generator. I was wondering if i can use sqlalchmey for that purpose ? On Wednesday, July 1, 2020 at 4:34:10 AM UTC-5 Simon King wrote: > Hi, > > What do you mean by "SQL injection"? > > Thanks, > > Simon > > On Tue, Jun 30, 2020 at 10:12 PM Divya Shivakumar > wrote: > > > > Hey how do i generate new sql injections from sqlalchemy . Any links or > information is much appreciated > > > > -- > > SQLAlchemy - > > The Python SQL Toolkit and Object Relational Mapper > > > > http://www.sqlalchemy.org/ > > > > To post example code, please provide an MCVE: Minimal, Complete, and > Verifiable Example. See http://stackoverflow.com/help/mcve for a full > description. > > --- > > You received this message because you are subscribed to the Google > Groups "sqlalchemy" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to sqlalchemy+...@googlegroups.com. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/sqlalchemy/fa4bac85-0fc2-42b5-b47b-11a35bfd7aa1o%40googlegroups.com > . > -- SQLAlchemy - The Python SQL Toolkit and Object Relational Mapper http://www.sqlalchemy.org/ To post example code, please provide an MCVE: Minimal, Complete, and Verifiable Example. See http://stackoverflow.com/help/mcve for a full description. --- You received this message because you are subscribed to the Google Groups "sqlalchemy" group. To unsubscribe from this group and stop receiving emails from it, send an email to sqlalchemy+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sqlalchemy/f12344d6-bf02-4d3c-a9af-09ddfc483be3n%40googlegroups.com.
Re: [sqlalchemy] SQL injection
Hi simon, i need to generate , sql injections for data analysis using sql code generator. I was wondering if i can use sqlalchmey for that purpose ? On Wednesday, July 1, 2020 at 4:34:10 AM UTC-5 Simon King wrote: > Hi, > > What do you mean by "SQL injection"? > > Thanks, > > Simon > > On Tue, Jun 30, 2020 at 10:12 PM Divya Shivakumar > wrote: > > > > Hey how do i generate new sql injections from sqlalchemy . Any links or > information is much appreciated > > > > -- > > SQLAlchemy - > > The Python SQL Toolkit and Object Relational Mapper > > > > http://www.sqlalchemy.org/ > > > > To post example code, please provide an MCVE: Minimal, Complete, and > Verifiable Example. See http://stackoverflow.com/help/mcve for a full > description. > > --- > > You received this message because you are subscribed to the Google > Groups "sqlalchemy" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to sqlalchemy+...@googlegroups.com. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/sqlalchemy/fa4bac85-0fc2-42b5-b47b-11a35bfd7aa1o%40googlegroups.com > . > -- SQLAlchemy - The Python SQL Toolkit and Object Relational Mapper http://www.sqlalchemy.org/ To post example code, please provide an MCVE: Minimal, Complete, and Verifiable Example. See http://stackoverflow.com/help/mcve for a full description. --- You received this message because you are subscribed to the Google Groups "sqlalchemy" group. To unsubscribe from this group and stop receiving emails from it, send an email to sqlalchemy+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sqlalchemy/d554467e-a42c-4eec-b851-3d743bc3823cn%40googlegroups.com.
Re: [sqlalchemy] SQL injection
Hi, What do you mean by "SQL injection"? Thanks, Simon On Tue, Jun 30, 2020 at 10:12 PM Divya Shivakumar wrote: > > Hey how do i generate new sql injections from sqlalchemy . Any links or > information is much appreciated > > -- > SQLAlchemy - > The Python SQL Toolkit and Object Relational Mapper > > http://www.sqlalchemy.org/ > > To post example code, please provide an MCVE: Minimal, Complete, and > Verifiable Example. See http://stackoverflow.com/help/mcve for a full > description. > --- > You received this message because you are subscribed to the Google Groups > "sqlalchemy" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to sqlalchemy+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/sqlalchemy/fa4bac85-0fc2-42b5-b47b-11a35bfd7aa1o%40googlegroups.com. -- SQLAlchemy - The Python SQL Toolkit and Object Relational Mapper http://www.sqlalchemy.org/ To post example code, please provide an MCVE: Minimal, Complete, and Verifiable Example. See http://stackoverflow.com/help/mcve for a full description. --- You received this message because you are subscribed to the Google Groups "sqlalchemy" group. To unsubscribe from this group and stop receiving emails from it, send an email to sqlalchemy+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sqlalchemy/CAFHwexcL%2BBjEHVD4K4khBxA8s_57T5kymzh7n8pP5TqxYOgATA%40mail.gmail.com.
[sqlalchemy] SQL injection
Hey how do i generate new sql injections from sqlalchemy . Any links or information is much appreciated -- SQLAlchemy - The Python SQL Toolkit and Object Relational Mapper http://www.sqlalchemy.org/ To post example code, please provide an MCVE: Minimal, Complete, and Verifiable Example. See http://stackoverflow.com/help/mcve for a full description. --- You received this message because you are subscribed to the Google Groups "sqlalchemy" group. To unsubscribe from this group and stop receiving emails from it, send an email to sqlalchemy+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sqlalchemy/fa4bac85-0fc2-42b5-b47b-11a35bfd7aa1o%40googlegroups.com.
