Step-by-step introduction to error based SQL injection - SQL injection tutorial for beginners

This SQL injection tutorial for beginners is a free part of the Mastering SQL injection course at Duckademy.

The goal of the Mastering SQL injection course is teach you how to look for and find SQL injection vulnerabilities in web applications as the best ethical hackers do.

IN THIS SQL INJECTION TUTORIAL for beginners you will learn what error based SQL injection means and how to use it to get arbitrary data from a database.
For this we will cover:
00:46 Theory and example of a simple error based SQL injection
27:44 Testing for error based SQL injection when brackets are used

Other FREE SQL INJECTION TUTORIALS for beginners from the Mastering SQL injection course:

Please note that this SQL injection tutorial for beginners is for educational purposes only.

SUBSCRIBE NOW FOR NEW FREE SQL injection TUTORIALS!

SUBSCRIBE TO OUR EMAIL LIST for more SQL injection tutorials!

FOLLOW US!

---------------------------------------------------------------------------------

[DuckademyITcourses]

Want to learn SQL injection well? Get the complete Mastering SQL injection course (20+ hours) now with 35% off at Duckademy.

[atharvapatil]

Really great video!
I have one doubt: What is the logic behind 0, 1, 0 or something, something else, something. Is it that initially 'group by' gives a unique index to something(0), then to something else(1), then when it encounters something(0) again, it considers it duplicate as the unique index is already present and so gives the error?

Also, I didn't exactly get the use of having min(0).
Good answers will be appreciated. Thank you in advance!

[梁文光-en]

From China, I hope you can translate Chinese subtitles, thank God demonstrates large, very grateful to learn so many things.

[TheGyan]

I am using PHP Version 5.3.10-1ubuntu3.17..  My Back-end DBMS is MySQL 5.0.11.. I am not getting any error message of sql query used in 7:00 time of video..  Please Help..

[TheGyan]

DOUBT
If output of rand(0) is always 0.15522042769493574, and
mysql> SELECT FLOOR(rand(0)*2);

| FLOOR(rand(0)*2) |

|                0 |

Always results 0.. Then how we can get pattern like 010 or 101..

Rest of thing working fine..

[nawarekko]

Hello... what about sitefinity asp.net ?!

[reymondwilliams]

Nice tutorial video. I've been working on
wordpress exploits lately therefore I have set up my own, outdated
wordpress site, 4.5 and i have set up some plugins on it, one of them is
vulnerable to a sql injection, however though I don't quite understand
how to exploit that vulnerability. Here is the exploit database
given in the exploit db url
with a select or update query in it it gives me permission denied and a
forbidden 403 page, with other sql query it just gives me a 0. Will you
please explain me where I have made a mistake and give me a hint to the
correct exploitation for this vulnerability.