Security testing

Security is an exercise in risk management. Risk analysis, especially at the design level, can help us identify potential security problems and their impact. Once identified and ranked, software risks can then help guide software security testing. We can find out software security hole using SQL injection and XSS command.

sql injection example:

http://pastebin.com/RJuNEWi8

try that link sql injection on password field. sometimes it work.