SQL Injection - Lab #14 Blind SQL injection with time delays and information retrieval

Опубликовано: 21 Февраль 2026
на канале: Rana Khalil
11,737
248

In this video, we cover Lab #14 in the SQL injection track of the Web Security Academy. This lab contains a blind SQL injection vulnerability. To solve the lab, we exploit the time-based SQL injection vulnerability and output the password of the administrator user.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://academy.ranakhalil.com/p/web-...

▬ Contents of this video ▬▬▬▬▬▬▬▬▬▬
00:00​​​ - Introduction
00:55 - Understand the exercise and make notes about what is required to solve it
03:41 - Exploit the lab manually
21:04​ - Script the exploit
35:22 - Summary
35:38 - Thank You

▬ Links ▬▬▬▬▬▬▬▬▬▬
SQL injection Lab #13 video (previous video):    • SQL Injection  - Lab #13  Blind SQL inject...  
SQL Injection | Complete Guide (theory video):    • SQL Injection | Complete Guide  
Python script: https://github.com/rkhal101/Web-Secur...
Notes.txt document: https://github.com/rkhal101/Web-Secur...
Web Security Academy Video Release Schedule: https://docs.google.com/spreadsheets/...
Web Security Academy: https://portswigger.net/web-security​
Rana's Twitter account:   / rana__khalil