SQL Injection Explained With @BuildHackSecure + FREE LABS!
Source: YouTube · NahamSec · published Aug 26, 2024 · 17:41
BLUF: This video demonstrates a beginner-friendly approach to learning SQL injection by starting with fundamental SQL query concepts using interactive labs on Hack The Box 0:21.
Key Takeaways:
• The instructor acknowledges the difficulty of SQL injection for beginners and suggests starting with basic SQL knowledge 0:00-0:11.
• Hack The Box provides specific labs designed to teach SQL injection from the ground up 0:19-0:21.
• The tutorial involves a hands-on session where the instructor explains how SQL queries function internally 0:38-0:41.
• The lesson focuses on manipulating parameters, such as IDs, to understand backend data handling 0:43-0:45.
This practical demonstration highlights the importance of understanding database mechanics before attempting exploitation techniques.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Adam okay you know more than anybody that I am super bad at SQL injection and I want to get better where do I start okay well first things first do you know how to write an SQL query I know how to write a basic select and that's about it but I know it's beyond that so what what's our what's our approach here okay well lucky for you we've got some Labs on hacking Hub and we can actually teach you how to do SQL from the beginning okay so I think this would be easier if I just fly out to you give me one sec I'll be right there a few moments later let's up up okay now that we're here in person show me how do we make a SQL query and what does it look like in the back end want to give some data to like an ID parameter yeah show I can let me open up our lab for this and for people that are watchi…