Research Academy
My account Customers About Blog Careers Legal Contact Resellers
Back to all learning paths
PRACTITIONER

SQL injection

This learning path introduces SQL injection (SQLi), a critical web vulnerability. You'll learn how to detect and exploit SQLi to uncover hidden data and manipulate application behavior, as well as essential techniques to secure applications against SQLi attacks.

Contents

Get started: Lab: SQL injection UNION attack, determining the number of columns returned by the query

0 of 51

GET STARTED

What is SQL injection? 0 of 1

What is SQL injection (SQLi)? APPRENTICE

How to detect SQL injection vulnerabilities 0 of 2

How to detect SQL injection vulnerabilities APPRENTICE

SQL injection in different parts of the query APPRENTICE

Retrieving hidden data 0 of 3

Retrieving hidden data APPRENTICE

Retrieving hidden data - Continued APPRENTICE

Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data APPRENTICE

Subverting application logic 0 of 2

Subverting application logic APPRENTICE

Lab: SQL injection vulnerability allowing login bypass APPRENTICE

SQL injection UNION attacks 0 of 2

SQL injection UNION attacks APPRENTICE

SQL injection UNION attacks - Continued APPRENTICE

Determining the number of columns required 0 of 4

Lab: SQL injection UNION attack, determining the number of columns returned by the query PRACTITIONER Get started

Database-specific syntax APPRENTICE

Determining the number of columns required APPRENTICE

Determining the number of columns required - Continued APPRENTICE

Finding columns with a useful data type 0 of 2

Finding columns with a useful data type APPRENTICE

Lab: SQL injection UNION attack, finding a column containing text PRACTITIONER

Using a SQL injection UNION attack to retrieve interesting data 0 of 2

Using a SQL injection UNION attack to retrieve interesting data APPRENTICE

Lab: SQL injection UNION attack, retrieving data from other tables PRACTITIONER

Retrieving multiple values within a single column 0 of 2

Retrieving multiple values within a single column APPRENTICE

Lab: SQL injection UNION attack, retrieving multiple values in a single column PRACTITIONER

Examining the database 0 of 5

Examining the database in SQL injection attacks APPRENTICE

Querying the database type and version APPRENTICE

Lab: SQL injection attack, querying the database type and version on MySQL and Microsoft PRACTITIONER

Listing the contents of the database APPRENTICE

Lab: SQL injection attack, listing the database contents on non-Oracle databases PRACTITIONER

Blind SQL injection 0 of 2

Blind SQL injection APPRENTICE

What is blind SQL injection? APPRENTICE

Exploiting blind SQL injection by triggering conditional responses 0 of 4

Exploiting blind SQL injection by triggering conditional responses APPRENTICE

Exploiting blind SQL injection by triggering conditional responses - Continued APPRENTICE

Exploiting blind SQL injection by triggering conditional responses - Continued APPRENTICE

Lab: Blind SQL injection with conditional responses PRACTITIONER

Error-based SQL injection 0 of 7

Error-based SQL injection APPRENTICE

Exploiting blind SQL injection by triggering conditional errors APPRENTICE

Exploiting blind SQL injection by triggering conditional errors - Continued APPRENTICE

Lab: Blind SQL injection with conditional errors PRACTITIONER

Extracting sensitive data via verbose SQL error messages APPRENTICE

Extracting sensitive data via verbose SQL error messages - Continued APPRENTICE

Lab: Visible error-based SQL injection PRACTITIONER

Exploiting blind SQL injection by triggering time delays 0 of 3

Exploiting blind SQL injection by triggering time delays APPRENTICE

Exploiting blind SQL injection by triggering time delays - Continued APPRENTICE

Lab: Blind SQL injection with time delays and information retrieval PRACTITIONER

Exploiting blind SQL injection using out-of-band (OAST) techniques 0 of 5

Exploiting blind SQL injection using out-of-band (OAST) techniques APPRENTICE

Exploiting blind SQL injection using out-of-band (OAST) techniques - Continued APPRENTICE

Lab: Blind SQL injection with out-of-band interaction PRACTITIONER

Exploiting blind SQL injection using out-of-band (OAST) techniques - Continued APPRENTICE

Lab: Blind SQL injection with out-of-band data exfiltration PRACTITIONER

SQL injection in different contexts 0 of 2

SQL injection in different contexts APPRENTICE

Lab: SQL injection with filter bypass via XML encoding PRACTITIONER

Second-order SQL injection 0 of 1

Second-order SQL injection APPRENTICE

How to prevent SQL injection 0 of 2

How to prevent SQL injection APPRENTICE

How to prevent SQL injection - Continued APPRENTICE