Resumen

CRESPO-MARTINEZ, Esteban. Vulnerability analysis with sqlmap applied to APEX5 context. Ingenius [online]. 2021, n.25, pp.104-113. ISSN 1390-860X.  https://doi.org/10.17163/ings.n25.2021.10.

Databases are usually the main targets of an attack, specifically for the information that they store, since, according to Druker, information is power. In this work vulnerability tests are performed of the database of an ERP software developed in APEX 5. For this purpose, FOSS tools are used to test and analyze vulnerabilities of databases, identifying that sessions used by ERP based on Oracle APEX are carried out randomly, and besides are generated again at particular times. It is therefore concluded that, with the tests applied and the updates of SQLMAP to the date of the experiment, it has not been possible to vulnerate the ERP software with SQL injection techniques.

Palabras clave : APEX; Data protection; Information systems evaluation; SQL Injection.

        · resumen en Español     · texto en Español     · Español ( pdf )