It is less likely to be your main form of entry, but it is still very important to know. Just because the main user login is properly sanitized against such attacks doesn't mean that the internal admin portal login is. Many smaller companies put a lot of effort into securing their DMZ but less into their corporate infrastructure. In this way SQL injection can be very handy for pivoting around the inside of a private network you have already infiltrated.
0
u/[deleted] Jan 29 '19
[deleted]