SQL Injection - Lab #2 SQL injection vulnerability allowing login bypass

In this video, we cover lab #2 in the SQL injection track of the Web Security Academy. This lab contains a SQL injection vulnerability in the login function. To solve the lab, we perform a SQL injection attack that bypasses authentication and allows us to log into the application as the administrator user.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬

▬ Links ▬▬▬▬▬▬▬▬▬▬

[freeguy]

Really! mam your explanation is fantastic!

[muhammadadnan]

Mam, could you please make your videos in 4k as well if possible? That would be great! Already great content!

[studiospan]

Tip - even if you don't know the username you can set it as true by giving paramter [ any' or 1=1 --] in the username as described in lab 1 since 1=1 is always true it gives that username is correct and password is commented anyway . offcourse it might not work in all cases usually when there are more users than just one (administrator in this case)

[zubairsafiii]

Will you explain other vulnr or just sqli?

[invisibleman]

Is it possible to baypass router authentication page

[Xxxi-xobv]

What is a good way of knowing if a login is vulnerable to SQL bypass

[yalghaar]

in login its showing emailaddress and password, how can we change parameter from email to username ?

[asimaziz]

which software you use in right side please explain i use burp suit but this is not like brup suit