Web Hacker Basics 01 (SQL Injection)
https://www.ispeech.org
In this example, we're going to walk through how to identify and exploit an SQL injection vulnerability, in a black box setting. From there, we're going to be able to run our own queries; which we'll use to learn how to map out the database structure. And Finally, we're going to put it all together and login as another user, with stolen credentials.
SQL Refresher:
https://www.w3schools.com/sql/
http://www.sqlcourse.com/cgi-bin/interpreter.cgi
http://www.sqlcourse2.com/intro2.html
Overview and testing for SQLi:
https://www.owasp.org/index.php/SQL_Injection
https://www.owasp.org/index.php/Testing_for_SQL_Injection_(OTG-INPVAL-005)
SQL Injection Prevention Cheat Sheet:
https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet
2018-06-29 06:13:06
source
0 Responses to Web Hacker Basics 01 (SQL Injection)