In this video, we cover Lab #4 in the SQL injection track of the Web Security Academy. This lab contains an SQL injection vulnerability in the product category filter. To solve the lab, we perform a SQL injection attack that returns an additional row containing the value provided. This technique helps us determine which columns are compatible with string data.
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://academy.ranakhalil.com/p/web-security-academy-video-series
▬ Contents of this video ▬▬▬▬▬▬▬▬▬▬
00:00 - Introduction
01:29 - Background theory
08:19 - Understand the exercise and make notes about what is required to solve it
09:33 - Exploit the lab manually
13:51 - Script the exploit
28:45 - Summary
29:09 - Thank You
▬ Links ▬▬▬▬▬▬▬▬▬▬
Python script: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/sql-injection/lab-04/sqli-lab-04.py
Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/sql-injection/lab-04/notes.txt
Lab #3 video (previous video): https://www.youtube.com/watch?v=4aS6j3cBVUU
SQL injection theory video: https://www.youtube.com/watch?v=1nJgupaUPEQ
Web Security Academy Youtube Video Series Release Schedule: https://docs.google.com/spreadsheets/d/16ypyLuDq2DZ1JAz_WvL1ZV-WiDWhvomgrK_1Hux4MFY/
Web Security Academy: https://portswigger.net/web-security
Rana's Twitter account: https://twitter.com/rana__khalil
