Introduction
Getting help
SQL Injection - Technical Deep Dive
Lab Environment Setup
Hands-on SQL Injection Labs
-
Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden (28:33)
-
Lab #2 SQL injection vulnerability allowing login bypass (33:12)
-
Lab #3 SQLi UNION attack determining the number of columns returned by the query (33:54)
-
Lab #4 SQL injection UNION attack, finding a column containing text (29:03)
-
Lab #5 SQL injection UNION attack, retrieving data from other tables (24:40)
-
Lab #6 SQL injection UNION attack, retrieving multiple values in a single column (29:18)
-
Lab #7 SQL injection attack, querying the database type and version on Oracle (26:45)
-
Lab #8 SQLi attack, querying the database type and version on MySQL & Microsoft (22:10)
-
Lab #9 SQL injection attack, listing the database contents on non Oracle databas (45:13)
-
Lab #10 SQL injection attack, listing the database contents on Oracle (40:19)
-
Lab #11 Blind SQL injection with conditional responses (48:33)
-
Lab #12 Blind SQL injection with conditional errors (44:52)
-
Lab #13 Blind SQL injection with time delays (19:03)
-
Lab #14 Blind SQL injection with time delays and information retrieval (35:31)
-
Note - Changes to Burp Collaborator
-
Lab #15 Blind SQL injection with out-of-band interaction (10:14)
-
Lab #16 Blind SQL injection with out of band data exfiltration (8:08)
-
Lab #17 SQL injection with filter bypass via XML encoding (7:10)
-
Lab #18 Visible error-based SQL injection (14:42)
Bonus Lecture
