Detecting SQL Injection in a White-box Environment (opens in new tab)

<p>The idea is simple. You want to <a href="/security_poc_sqlinjectiontampering.html" class="themainlink">detect SQL Injection, when you have full access to the code and a QA team</a>. You need to audit massively complex code that spans several servers and involves validation that may be happening on any of them, or the client in javascript. You want to be able to bypass the javascript validation in whole - but not rewrite any javascript or do anything complicated - because you don't want ...