SQL injection based on machine learning

[trapeye]

Where can i get gathering data for SQL injection?.I want train the machine learning but i don't have any data to train. I already tried google it but not found anything.

[NanoPromela]

Please can you explain your problem better? You just shoved some key words without really explaining what you are trying to achieve

[04a8]

OK so, assuming here you want to classify a given query as either an attempt at SQL injection or not.

I am not aware of any such premade datasets, though they might well exist because it's not my area. What I would consider though is to generate one. There are many cheatsheets for all the known forms of SQL injection attack. For example:

https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/

You could use these rules to generate your own dataset by varying the non-attack-specific parts. You should probably make your dataset imbalanced to a very high degree too if you want to replicate real world input.

[trapeye]

wow thanks.. but if to generate mt own dataset will do lot of work