Hack The Box CBBH Prep: SQL Injection

In this video, we dive into SQL injection techniques using a Docker-hosted Pwnbox environment. Starting with a login page hinting at SQL injections, we demonstrate manual input of SQL commands inspired by the 'Payload All The Things' resource. The session covers the importance of databases and includes a step-by-step guide on achieving a successful SQL injection to capture a flag. ============================================================== Learning Objectives, Organizations and Companies Covered: - Learn how to practice ethical hacking safely - Learn about the OWASP Top 10 - Navigate Hack The Box 's Hacking Labs platform - Navigate the Linux command line - Practice SQL Injection against a login form - Utilize Payload All Things to discover manual SQL injection commands we can try Hack The Box: https://www.hackthebox.com/ OWASP Top 10: https://owasp.org/www-project-top-ten/ Payload All The Things: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/SQL%20Injection/README.md ============================================================== Video Created by: Robert "LTNBOB" Theisen Lets Connect on LinkedIn: https://www.linkedin.com/in/robertftheisen/ Personal Blog: https://bob.ltneighbor.net/ Join the LTN Labs learning community on Discord: https://discord.gg/35V8A3jN Lets Connect on X: https://x.com/RobertFTheisen Join the live stream on Twitch: https://www.twitch.tv/ltn_bob ============================================================== Chapters 00:00 Introduction to SQL Injection 00:08 Setting Up the Environment 00:56 Exploring Payloads and Tools 02:13 Manual SQL Injection Techniques 05:09 Understanding the Importance of Databases 05:50 Capturing the Flag 06:16 Conclusion and Reflections ============================================================= Hashtags #informationtechnology #informationsecurity #ethicalhacking #sqlinjection