SQL Injection - Lab #17 SQL injection with filter bypass via XML encoding | Long Version

Pubblicato il: 29 aprile 2023
sul canale di: Rana Khalil

7,219

197

In this video, we cover Lab #17 in the SQL injection module of the Web Security Academy. This lab contains a SQL injection vulnerability in its stock check feature. The results from the query are returned in the application's response, so you can use a UNION attack to retrieve data from other tables.

The database contains a users table, which contains the usernames and passwords of registered users. To solve the lab, perform a SQL injection attack to retrieve the admin user's credentials, then log in to their account.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://academy.ranakhalil.com/p/web-...

▬ 📚 Contents of this video 📚 ▬▬▬▬▬▬▬▬▬▬
00:00 - Introduction
00:13 - Web Security Academy Course (https://bit.ly/30LWAtE)
01:24 - Navigation to the exercise
01:52 - Understand the exercise and make notes about what is required to solve it
02:57 - Exploit the lab
08:07 - Summary
08:25 - Thank You

▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
Notes.txt document: https://github.com/rkhal101/Web-Secur...
Web Security Academy Lab Exercise: https://portswigger.net/web-security/...
Rana's Twitter account: / rana__khalil

In questa pagina del sito puoi guardare il video online SQL Injection - Lab #17 SQL injection with filter bypass via XML encoding | Long Version della durata di ore minuti seconda in buona qualità , che l'utente ha caricato Rana Khalil 29 aprile 2023, condividi il link con amici e conoscenti, su youtube questo video è già stato visto 7,219 volte e gli è piaciuto 197 spettatori. Buona visione!

18,765

456