Automating SQL Injection Discovery with FSec

Automating-SQL-Injection-Discovery.fs

let getOrderIdsForName name =
  use con = new SqlConnection "my-connection-string"
  con.Open ()
  let sql = "SELECT OrderId FROM Orders WHERE Client = " + name
  use cmd = new SqlCommand (sql, con)
  cmd.CommandType <- CommandType.Text
  let rdr = cmd.ExecuteReader ()
  seq { while rdr.Read () do
        yield rdr.["OrderId"] |> string }
  
[<Property>]
let ``discover SQL injection`` () =
  FSec.sqlInject
  |> Arb.fromGen
  |> Prop.forAll <|
    (getOrderIdsForName >> ignore)