SQL Injection - Lab #9 SQL injection attack, listing the database contents on non Oracle databases

In this video, we cover Lab #9 in the SQL injection track of the Web Security Academy. This lab contains a SQL injection vulnerability in the product category field. To solve the lab, we perform a UNION based SQL injection attack on a PostgreSQL database that retrieves the usernames and passwords of all users of the application.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬

▬ Links ▬▬▬▬▬▬▬▬▬▬

[mustangpolygraph]

Amazing. Saw you on twitter and now on YouTube, you are truly an inspiration 🌸. Keep making more tutorials like this they are really beneficial for newbies like me.

[MG-bmoj]

Great videos. You show step by step how a proffesional should reach the goal. Thanks!

[TadakichiSan]

Thanks a lot. I'm currently doing my oscp and always struggled with sqli but your videos helped me out a lot.

[DaCat]

Thank you so much, i love how you go into useful details with each step that you dont have to do. its so useful

[hacktrader]

Video is awesome...every time Script Making is tricky ....Please upload More and more ...Thank you

[ACUITAjaiv]

teachers like u pave the way for the young gen's to achieve more and more ♥

[Conan_]

شكراً ، أنتِ فعلاً مبدعة ❤، أنتِ عربية صح؟

[Muawia.]

Thank you these videos are really helpful and informative! your explanation is so well and smooth also😊🙏

[Shank_Yog]

It took 1 day to solve this lab 😅😅😅😅 thank you ma'am

[StudiofrogPl]

Rana, you are a really great teacher. I learned a lot from YOU ♥ THANK YOU

[abemendez]

Thank you so much Rana, I learnt a lot. May Allah bless your heart.

[maunton]

Thank you very much for these helpful videos.

[MohamedAhmed-lrc]

Hello, I am a beginner in penetration testing, And I was so excited in this field, but the SQL Injections is very boring to me, because I can't understand it well.

[monalipaunikar]

Thank you so much for giving the approach👍

[quanduonginh]

thank you so much, video is very usefull

[shaneaxten]

I am having issues with Burpsuite once I begin adding the information_Schema portion, for some the reason the repeater has stopped showing anything when I send. Any help is appreciated

[lucasoliveira-fwpm]

Hello !!

Thanks for helping us learn !!

Dou Can you help me? I do not understand one thing... why are you putting NULL before the ", "? why is this necessary?

Thanks...

[gavinLovesMetallica]

I was wondering what is the next level of SQL Injection attacks after finishing your course.

[Sina.Najarha]

Hi Rana your videos all awsome, the question I have is why do we put NULL in our query?
I didnt get the point of that
thanks

[kingofthesummer]

Please keep up the great work. I really like your teaching style. What text editor are you using for notes ?