SQL Injection Beginner Crash Course

This video will teach you what is SQL Injection vulnerabilities, how to discover then and how to exploit them to access database records such as usernames and passwords.

🔴 Free access to Snyk - Automatic code scanning and bug discovery👇

---------------------------------------------------------------
🧠 My Bug Bounty Course👇

🧠 My other hacking courses 👇

🌟 VIP Membership (Discord) 👇

---------------------------------------------------------------
----------------------------------------------------------------
Time Stamps:
00:00 - intro
01:25 - Thanks to Snyk :)
02:16 - Introduction to SQLi
08:40 - Discovering SQLi?
16:10 - Exploiting SQLi

[digitalphoenix]

Excellent video. I've been slightly confused about SQL injections, therefore I don't know what to look for to locate breaches. You have a great way of explaining things simply, but not condescendingly. 👍

[-ankit]

Hi zaid i am enrolled in all most all courses you have created including the master class and i would like to say that your courses are awesome i have been gaining a lot of knowledge from your courses and this tutorial is awesome. much love From NEpal💖💖

[EmekaEkawuokwu]

I am loving your videos and just a new subscriber, thanks for making it free😊

[HeatherHerries]

Broke this down perfectly! Thank you for your help!

[naufalendram]

I remember the first time I succeeded in doing SQLI on my high school website, and managed to enter the admin dashboard to see all the teacher and student information on the website, A little trolling there by adding an admin user😂

[esegu]

This is so awesome Z.
Some things become more of a game of You practice smart

[EscobarBLUE]

The video was great! Thank you for making it!

[chinedumichael]

@zSecurity, You are such a good teacher. before i taught SQL injecton is a kinda a hard topic.. To tell you the truth ater watching this video, i was happy to see myself falling in love with this topic . now i know SQL injection is easy and that i can learn it . {maybe} 😊LOLZ great video. keep winnig my heart to become an CEH}

[jimboelterdotcomm]

Aha, I have been misunderstanding exactly where (and how) the actual injection happened - in the URL at the top of the page, , not in some super-secret F12 "developer mode". Thsnks, that really helps!

[Chunda]

zSecurity, this was a fantastic intro to SQL Injection attacks. I will be shocked though if the sites are that loose- input validation and masking anyone? better not be that lackadaisical.

[GreenSmile]

Is there any way to find out which database is server using??

[braimahchannel]

Good lecture and interesting part. I want to know more of SQL

[Staralla-c]

Thanks zaid sir, I really enjoyed your content. soo useful and good.

[Pentester_cybsec]

I enrolled ur bug bounty course. Pls make a video how to write a query to determine tables and column names in blind error based sql injection(oracle, Microsoft sql, postgresql, mysql database)

[felixhar]

Hi Zaid, can you please make more content on Server Side Attacks on Computers. Like the lecture in your general ethical hacking course. So I mean, exploits like RDP or EternalBlue or also Active Directory exploits.

[Chunda]

Good, but one issue. SQL is not a Markup Language, it is Declarative with Procedural elements.

[autobots]

Thanks a lot, Zaid, it was a very educational video!!! keep up the good work!

[therapysession]

Does anyone know the essence of the "+" sign he keeps adding?

[Stone]

good job but how I can change the data in the database

[SmartTech-Efe]

Nice video, but I think you can't login with a hashed password... or is there a way you can convert the hashed password to the exact password before hashing ?