TryHackMe | SQL Injection | Walkthrough
Learn how to detect and exploit SQL Injection vulnerabilities.
As always, I recommend to read through every task to get a complete understanding of each room. Happy learning!
♾️TIMESTAMP ♾️
1:07 Task 1 - Brief
1:25 Task 2 - What is a Database?
2:05 Task 3 - What is SQL?
3:41 Task 4 - What is SQL Injection?
4:12 Task 5 - In-Band SQLi
8:17 Task 6 - Blind SQLi - Authentication Bypass
9:20 Task 7 - Blind SQLi - Boolean Based
14:41 Task 8 - Blind SQLi - Time Based
17:59 Task 9 - Out-of-Band SQLi
18:18 Task 10 - Remediation
SQL injection is a type of cyber attack that targets databases through improperly sanitized user inputs in web applications. In this attack, malicious code is inserted into input fields, such as login forms or search boxes, with the intention of manipulating the underlying SQL queries that interact with the database. If the application fails to properly validate and sanitize these inputs, attackers can exploit this vulnerability to execute unintended SQL commands, potentially gaining unauthorized access to the database, extracting or modifying data, or even causing data breaches. Preventing SQL injection involves using prepared statements, parameterized queries, and input validation to ensure that user inputs are properly handled and sanitized before interacting with the database.