Abstract
[Placeholder abstract — replace with real abstract from PDF]. A controlled penetration-testing study against the Damn Vulnerable Web Application (DVWA), evaluating common SQL injection attack vectors — error-based, union-based, boolean-based, and time-based blind — and the effectiveness of input-validation defences including prepared statements, parameterised queries, and input whitelisting.
Keywords: SQL injection · penetration testing · DVWA · web security
1. Introduction
[Placeholder — replace with the real Introduction. Typical framing: SQL injection remains a top-10 web vulnerability per OWASP; this study quantifies the attack surface on a known-vulnerable target.]
2. Methods
[Placeholder — describe the DVWA deployment, security-level settings tested, attack vectors used, and the metric for measuring exploit success and detection.]
3. Results
[Placeholder — present the success rates for each attack vector at each security level. Include screenshots or logs of successful exploits where appropriate.]
4. Discussion
[Placeholder — interpret the results in light of input-validation theory. Discuss the relative effectiveness of prepared statements, parameterised queries, and whitelisting as defences.]
5. Conclusion
[Placeholder — summarise the findings and recommend baseline security practices for small-scale web applications.]
References
- [1] [Placeholder reference 1]
- [2] [Placeholder reference 2]
- [3] [Placeholder reference 3]
- [4] [Placeholder reference 4]
- [5] [Placeholder reference 5]
- [6] [Placeholder reference 6]
- [7] [Placeholder reference 7]