SQL injection is a common vulnerability found in most contemporary web applications. There are many detection and prevention mechanisms for this attacks, such as intrusion detection systems and web application firewalls. Unfortunately, in some network environments, deploying some of these security systems can be a challenging task. The aim of this work is to develop a system for automatic detection and verification of SQL injection attacks in web applications. The implemented solution will rely solely on network data. It will correctly correlate security events from various systems and run tests to verify successful exploitation of a web application. In the theoretical part of the thesis the student will survey both basic SQL injection principles and automated tools for finding these flaws and their exploitation (e.g., sqlmap, w3af, sqlbrute).