In this video, we cover Lab #12 in the SQL injection track of the Web Security Academy. This lab contains a blind SQL injection vulnerability. To solve the lab, we perform a blind based SQL injection attack on the database that retrieves the password of the administrator user on the application.
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://academy.ranakhalil.com/p/web-security-academy-video-series
▬ Contents of this video ▬▬▬▬▬▬▬▬▬▬
00:00 - Introduction
00:59 - Understand the exercise and make notes about what is required to solve it
03:28 - Exploit the lab manually
28:52 - Script the exploit
44:45 - Summary
45:00 - Thank You
▬ Links ▬▬▬▬▬▬▬▬▬▬
SQL injection Lab #11 video (previous video): https://www.youtube.com/watch?v=5brORHQSJMc
SQL Injection | Complete Guide (theory video): https://www.youtube.com/watch?v=1nJgupaUPEQ
Python script: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/sql-injection/lab-12/sqli-lab-12.py
Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/sql-injection/lab-12/notes.txt
Web Security Academy Video Release Schedule: https://docs.google.com/spreadsheets/d/16ypyLuDq2DZ1JAz_WvL1ZV-WiDWhvomgrK_1Hux4MFY/
Web Security Academy: https://portswigger.net/web-security
Rana's Twitter account: https://twitter.com/rana__khalil
