UNLEASH THE POWER OF SQL INJECTION! | Beginners Guide to Hacking with SQLi
Hey everyone, in this video I teach you everything you need to know about SQL injection! From 0 to hero! Using handcrafted animations, theory, practical, live demos, live coding and pwnage! We have it all! - See the timestamps to see really just how much there is ;)
UNLEASH THE POWER OF SQL INJECTION!!!!
⏱️Timestamps/Steps:
➡️ 00:00 - SQL Injection Introduction
➡️ 00:18 - What is a database?
➡️ 00:24 - Database example/Animation
➡️ 00:40 - SQL Introduction (Structured Query Language)
➡️ 00:45 - SQL variants (postgresql/oracle/microsoft/mysql)
➡️ 00:55 - SQL theory (How SQL works)
➡️ 01:18 - SQL Query Animation
➡️ 02:00 - Live SQL demo - Selecting Data with SQL
➡️ 02:35 - Selecting specific Data with SQL (where clause)
➡️ 03:06 - Using UNION with SQL data
➡️ 03:45 - Dumping secret information with UNION
➡️ 04:00 - Using OR clause in SQL
➡️ 04:20 - Learning how SQL boolean(true/false logic) works (1=1)
➡️ 04:30 - Importance of special characters
➡️ 04:50 - SQL comments
➡️ 05:05 - Using comments to escape where clause
➡️ 05:45 - Live demo! - Error Based SQL injection
➡️ 05:55 - Understanding how our input is fed into the SQL query
➡️ 06:05 - Reviewing the SQL database
➡️ 06:12 - Understanding the importance of special characters
➡️ 06:30 - Manipulating the query using special characters and OR
➡️ 06:50 - Dumping all users using - 'or 1='1
➡️ 07:00 - SQL authentication bypass ('or'1'='1)
➡️ 07:40 - Bypassing authentication to specific users
➡️ 07:43 - Pwning micheal scott (the office) ;) (dwight wont be happy ;)
➡️ 07:50 - Dumping the backend database using UNION SQL injection (SQLi)
➡️ 07:55 - Abusing "order by" to detemine number of columsn (SQLi)
➡️ 08:30 - Dumping database data + concatting it
➡️ 08:40 - Dumping database data ( database() )
➡️ 08:47 - Dumping database data ( version() )
➡️ 08:50 - Dumping database data ( CURRENT_USER() )
➡️ 08:50 - Dumping database data ( @@datadir )
➡️ 08:55 - Dumping table names via UNION SQL injection
➡️ 09:24 - Dumping column names via UNION SQL injection
➡️ 09:38 - Dumping username/passwords via UNION SQL injection
➡️ 09:40 - Escalating SQL injection to RCE
➡️ 10:00 - Getting RCE
➡️ 10:10 - BLIND SQL injection! (Live Demo!)
➡️ 10:11 - Understanding the application and its responses
➡️ 10:40 - Understanding the implicits behind our Blind SQL injection
➡️ 11:00 - Proving we have SQLi
➡️ 11:20 - Understanding AND/OR clauses
➡️ 11:50 - Escalating our injection to detemine database information
➡️ 12:20 - Using boolean logic to dump the name of the database
➡️ 12:45 - Using substring to dump each letter of Database info at a time
➡️ 12:55 - Dumping database data one character at a time (SQLi)
➡️ 13:25 - Automating SQLi dump with burp suite (intruder)
➡️ 13:55 - Dumping Database information with burp
➡️ 14:02 - LIVE CODE - Automating this process with python
➡️ 14:03 - Write python code to create SQLi payloads
➡️ 14:27 - Write python code to create SQLi payloads and send then via HTTP
➡️ 14:55 - Dump Students database characters automagically
➡️ 15:04 - Automating dumping of all characters (SQLi)
➡️ 15:30 - Dumping database name automagically
➡️ 15:40 - Dumping table name (blind SQLi)
➡️ 16:58 - Retrieving table name (blind SQLi)
➡️ 16:58 - Dumping column name (blind SQLi)
➡️ 17:10 - Retrieving column name (blind SQLi)
➡️ 17:10 - Dumping username/password (blind SQLi)
➡️ 17:54 - Outro / Please like/subscribe :)
⭐️My twitter:
🔗 / secaura_
⭐️My gitbook:
🔗https://secaura.gitbook.io/hackthebox/
For more Cyber security/hacking/pentesting beginner based content, check out the rest of my channel covering:
⭐️Web application security:
🔗Web Fundamentals for Cyber Security Series https://youtube.com/playlist?list=PLw...
🔗HackTheBox | Web/OSWE • HackTheBox | Web/OSWE
🔗OSWE "Build and Break it" Guide (Offensive Security Web Expert) • OSWE "Build and Break it" Guide (Offe...
SQL injection, Server Side template Injection, XSS, remote code execution/Injection(RCE) XXE(XML Enternal Entity Injection) etc.
⭐️Linux Hacking + Priv esc - • HackTheBox | Linux
⭐️Windows Hacking + Priv esc- • HackTheBox | Windows
⭐️Active Directory Hacking - • HackTheBox | ActiveDirectory
⭐️GitHub: https://github.com/SecAuraYT/HackTheB...