> For the complete documentation index, see [llms.txt](https://newrouge.gitbook.io/roguebook1/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://newrouge.gitbook.io/roguebook1/group/thick-client/input-validation.md).

# Input validation

User input can be dangerous.

It is very common that application doesn't sanitize the user input before processing which leads to many types of attacks.

In case of DVTA:

1. SQL injection leading to authentication bypass.
2. CSV injection.

*Check* [*this* ](https://resources.infosecinstitute.com/topic/damn-vulnerable-thick-client-app-part-4/)*article for more detail explanation.*

Whenever you get a chance to intercat with the application always pay close attention to inout fields you never know how and where these inputs will be used. You can totally bring your web hacking knowledge in place in this case.

You can check for various Injection attacks like SQL, nosql, command, XSS etc.