Injection - Attack Vectors

> ⚠️ EDUCATIONAL PURPOSE ONLY

> This document describes attack concepts at a high level for educational purposes.

Understanding Attack Vectors

Attackers insert malicious code into queries/commands that get executed by the application.

Common Attack Patterns

1. SQL Injection: Manipulating database queries
2. Command Injection: Executing OS commands
3. LDAP Injection: Modifying directory queries
4. NoSQL Injection: Exploiting NoSQL databases

What's Next?

• Overview: Understand what injection is
• Prevention: Learn how to prevent these attacks
• Examples: See vulnerable vs secure code
• Lab: Practice identifying vulnerabilities

---

Part of the OWASP Top 10 Educational Repository