SQL Injection (SQLi) Process Model

😈
Attacker
⚙️
Web Server
🗄️
Database
Payload
SELECT * FROM users WHERE name = ' ' OR '1'='1 '

Click "Start" to visualize how an SQL Injection attack works.

Malicious Payload
System Logic
Leaked Data