SQL Injection - Lab #11 Blind SQL injection with conditional responses

Опубликовано: 28 Октябрь 2024
на канале: Rana Khalil
23,772
580

In this video, we cover Lab #11 in the SQL injection track of the Web Security Academy. This lab contains a blind SQL injection vulnerability. To solve the lab, we perform a blind based SQL injection attack on the database that retrieves the password of the administrator user on the application.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://academy.ranakhalil.com/p/web-...

▬ Contents of this video ▬▬▬▬▬▬▬▬▬▬
00:00​​​ - Introduction
00:58 - Understand the exercise and make notes about what is required to solve it
03:10 - Exploit the lab manually
31:55​ - Script the exploit
48:17 - Summary
48:39​ - Thank You

▬ Links ▬▬▬▬▬▬▬▬▬▬
SQL injection Lab #10 video (previous video):    • SQL Injection - Lab #9 SQL injection ...  
SQL Injection | Complete Guide (theory video):    • SQL Injection | Complete Guide  
Python script: https://github.com/rkhal101/Web-Secur...
Notes.txt document: https://github.com/rkhal101/Web-Secur...
Web Security Academy Video Release Schedule: https://docs.google.com/spreadsheets/...
Web Security Academy: https://portswigger.net/web-security​
Rana's Twitter account:   / rana__khalil