SQL Injection - Lab #6 SQL injection UNION attack, retrieving multiple values in a single column

In this video, we cover Lab #6 in the SQL injection track of the Web Security Academy. This lab contains a SQL injection vulnerability in the product category field. To solve the lab, we perform a UNION based SQL injection attack that retrieves the usernames and passwords of the users of the application in a single column.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬

▬ Contents of this video ▬▬▬▬▬▬▬▬▬▬
00:00​​​ - Introduction
01:15 - Understand the exercise and make notes about what is required to solve it
02:45​​ - Exploit the lab manually
14:32​​ - Script the exploit
28:49 - Summary
29:14 - Thank You

▬ Links ▬▬▬▬▬▬▬▬▬▬

[aaronwhite]

Thanks for the videos, Rana! Your post of the OSCP HTB list finally got me back and started on my OSCP studying.

Keep up the great work!

[mostafasayed]

جزاكى الله خيرا ونفعك وزادك من فضله فى الدنيا والاخرة بأذن الله

[anothergay]

hey I started learning on web security academy, I'm using your videos as a reference but I realized that I need to study some programming aside . what programming language/s you recommend learn to have better understanding of the web security academy curriculum also best resource to learn it as many courses focused on style etc

[harikrishnareddy]

Hi Rana, When you will be posting videos on other attacks... I see all your videos related to SQL injections.
Can you please create videos on other attacks of OWASP top 10 vulnerabilities.