How to detect SQL injection vulnerabilities

Retrieving hidden data

Retrieving hidden data - Continued

Subverting application logic

SQL injection UNION attacks

Determining the number of columns required

Determining the number of columns required - Continued

Lab: SQL injection UNION attack, determining the number of columns returned by the query PRACTITIONER

Finding columns with a useful data type

Using a SQL injection UNION attack to retrieve interesting data

Retrieving multiple values within a single column

Examining the database in SQL injection attacks

Querying the database type and version

Lab: SQL injection attack, querying the database type and version on MySQL and Microsoft PRACTITIONER

Listing the contents of the database

Blind SQL injection

Exploiting blind SQL injection by triggering conditional responses

Exploiting blind SQL injection by triggering conditional responses - Continued

Exploiting blind SQL injection by triggering conditional responses - Continued

Error-based SQL injection

Exploiting blind SQL injection by triggering conditional errors

Exploiting blind SQL injection by triggering conditional errors - Continued

Lab: Blind SQL injection with conditional errors PRACTITIONER

Extracting sensitive data via verbose SQL error messages

Extracting sensitive data via verbose SQL error messages - Continued

Exploiting blind SQL injection by triggering time delays

Exploiting blind SQL injection by triggering time delays - Continued

Exploiting blind SQL injection using out-of-band (OAST) techniques

Exploiting blind SQL injection using out-of-band (OAST) techniques - Continued

Lab: Blind SQL injection with out-of-band interaction PRACTITIONER

Exploiting blind SQL injection using out-of-band (OAST) techniques - Continued

SQL injection in different contexts