SQL Injection Vulnerability Explained | TryHackMe Junior Penetration Tester

In this video walk-through, we covered the types of SQL injection vulnerability namely error based, time based, blined and boolean based SQL injection. We used TryHackMe Junior Penetration Tester pathway.
*********
Receive Cyber Security Field, Certifications Notes and Special Training Videos
**********
Writeup
******
Patreon
Instagram
Twitter
Facebook
LinkedIn
Website
Backup channel
My Movie channel:
******

[gmoguel]

The best expaination for SQL Injection that I've ever heard, I never understood until I watched this video, thank you.

[peepers]

This was one of the best explanations of SQL injection I've seen Thank you

[NimbleSF]

Very VERY helpful. I don't totally know all the SQL formatting and arguments and stuff yet, so it helps to have it explained. It was even better once you started explaining beyond the task because it helped reinforce the points the tasks made.

[ixfskmv]

once again mr. Motasem to help me not lose more time banging my head against the wall, thanks!

[iCyberVenom]

Great explanation. Best to increment by one for each letter/number when "guessing" instead of randomly hopping between letters and numbers. Then again...a script could automate this entire process, so it's interesting this SQL injection task never mentions it. It leaves learners with the impression they'll have to memorize these manual tests.

[TYLONsRoar]

Thank you Kind Sir. Now all I have to do is watch👏 cram👏 and repeat.👏

[alexandrabeekers]

Totally agree with previous comments. Thank you for this excellent explanation, couldn't have done it without it.

[hequinteros]

The best explanation I have seen for SQL Injection, specially about the task #8 😊

[aroxander]

very nice video, I was very confused on the wording at level 4 so seeing how you were doing it made it click in my head

[GuyFawkes]

What is the purpose of union, from what I understood it is used to select data from multiple tables, I am banging my head against the wall understanding this part union select 1, union select 1, 2, 3

[TheSpecialist]

I find your channel very informative thanks bro.

[extremoleste]

Friend I really like your classes, please make more videos of hard level machines

[francesa]

Thanks a lot for the detailed explanation. This is so beautiful

[WarThunderista]

Guys I suggest you to bang your head first and see this video after you complete it on your own to confirm your knowledge. This way you are going to understand everything much better.

[sufij]

Hey brother! Can you please cover the CSS room! Been stuck on the last challenge for a couple days and cannot figure out what exactly im doing wrong. Apparently there is an automated component which appears to be complicating things a bit.

[kezzle]

This isn't much of an explanation, like why you changed the id to a zero

[fmoney]

At 18:53 did you copy the single apostrophe before the OR? It’s not working for me and I need to spend more time to understand it worked but I don’t understand what I was doing wrong. On a better note I figured out the password started with a three as soon as you said numbers I tried 1 2 then 3 and got a true response on the level three question

[vimalan_sb]

At 23:25, Can you please explain how the SQL query -> "SELECT * FROM users where username = 'user' UNION SELECT 1, 2, 3;" changed the value from {"taken" : false} to {"taken" : true} even though the username : 'user' is not present in the database ??

[mridontclickbaitftw]

Im kind of confused how you got 3845 on the boolean based injection....

[institutfuralternativewahr]

the last room kinda confused me
thanks