SQL Injection - Tryhackme

Hi everyone,

In this video, we'll continue with the series about "Introduction to Web Hacking" with Command Injection vulnerabilities.

Chapters:
00:00 Intro
01:05 what are databases?
04:47 Relation vs Non-Relational?
06:08 what's SQL?
07:13 SELECT
13:46 UNION
15:15 INSERT
16:00 UPDATE
17:22 DELETE
18:31 What is an SQL Injection?
21:46 In-band SQLi
22:09 Error-based SQL Injection
22:25 Union-based SQL Injection
31:55 Blind SQL Injection
32:20 Blind SQLi Auth Bypass
35:38 Blind SQLi boolean based
48:28 Blind SQLi Time based
1:01:00 Out-of-band SQLi
1:02:13 Remediation



Resources:
- Try Hack Me SQL Injection Room: https://tryhackme.com/room/sqlinjectionlm




OWASP Resources:
- OWASP Testing for SQL Injection: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05-Testing_for_SQL_Injection
- OWASP - SQL Injection Prevention Cheat Sheet: https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html

Other resources:
- SQL Syntax: https://www.w3schools.com/sql/sql_syntax.asp
- PHP mysql Prepared statements: https://www.w3schools.com/php/php_mysql_prepared_statements.asp
- PHP form validation: https://www.w3schools.com/php/php_form_validation.asp


Contacting me:
Twitter: https://twitter.com/Tr3s0r

See you next time!