Denial of Service from Multiple Logins

• Denial of service attacks are a major issue in web applications

• If the end user cannot conduct business or perform the service offered by the web application, then both time and money are wasted

Solution

• Use SQL to dump the login table

• • Inject into the password field…

' OR '1' = '1

Login as 3 different users