آموزش Sql Injection

 This course is part of the 20 course Ethical Hacking Series. SQL injection remains the number one risk on the web today. Understanding how to detect it and identify risks in your web applications early is absolutely critical. This course goes through the risk in depth and helps you to become an ethical hacker with a strong SQL injection understanding. Why SQL Injection Matters 20:52 Overview 2:23 The Significance of SQL Injection 5:09 Executing a SQL Injection Attack 6:01 The Impact of a Successful Attack 3:35 SQL Injection in the Wild 2:20 Summary 1:23 Understanding SQL Queries 23:03 Overview 2:55 Understanding Structured Query Language 6:52 Statement Termination 2:22 Using the SQL Comment Syntax 2:19 SQL Queries Versus Data 4:27 The Value of Internal Exceptions 1:45 Summary 2:20 The Mechanics of SQL Injection Attacks 45:09 Overview 2:31 Types of SQL Injection 4:32 The Single Character Injection Test 7:41 Modifying the Query Structure 8:45 Circumventing Website Logins 6:41 Modifying Data and Database Objects 4:19 Identifying the Risk in Code 3:46 Understanding and Detecting Input Sanitization 4:03 Summary 2:47 Discovering Schema and Extracting Data 45:26 Overview 2:44 Understanding the Union Operator 3:29 Executing Union Injection 10:47 Manual Database Structure Discovery with Error-based Injection 5:52 Querying System Objects for Schema Discovery 2:50 Extracting Schema Details with Union Injection 4:43 Enumerating Result Sets with Sub-queries 5:32 Extracting Schema Details with Error-based Injection 7:17 Summary 2:08 Blind SQL Injection 46:53 Overview 2:27 Basic and Blind Attack Success Criteria 3:54 Understanding a Blind Attack 4:25 Applying Boolean Based Injection 4:05 Constructing Yes and No Questions for Boolean Based Injection 8:20 Enumerating via ASCII Values 8:32 Where Time Based Injection Makes Sense 2:06 Understanding the WAITFOR DELAY Command 2:11 Constructing a Time Based Attack 8:56 Summary 1:52 Advanced SQL Injection Concepts 44:55 Overview 2:38 Database Server Feature Comparison 6:43 Establishing Account Identity and Rights 4:57 Enumerating Other Databases on the System 5:19 Creating Database Logins 5:29 Extracting Passwords from SQL Server Hashes 4:07 Replicating a Table Using OPENROWSET 5:11 Executing Commands on the Operating System 4:45 SQL Injection for Network Reconnaissance 2:14 Summary 3:28 Defending Against Attacks 44:56 Overview 2:23 Implement Proper Error Handling 2:36 Validating Untrusted Data 4:42 Query Parameterization 5:21 Stored Procedures 3:49 Object Relational Mappers 3:39 The Principle of Least Privilege 7:57 Isolating the Database Network Segment 4:13 Using an IDS or WAF 4:33 Keeping Software Patched and Current 2:35 Summary 3:04 Evasion Techniques 20:43 Overview 1:24 Understanding Signatures 2:28 Basic Evasion Techniques 1:57 Encoding for Evasion 1:40 Splitting Strings 1:35 White Space Diversity 2:43 Inline Comments 2:34 Variables 1:43 String Manipulation 2:56 Summary 1:39 Automating Attacks 33:54 Overview 2:25 Testing in the Browser with SQL Inject Me 3:42 Fuzz Testing with Burp Suite 9:43 Data Extraction with Havij 3:24 Schema Mapping with sqlmap 3:28 Dynamic Analysis Testing with NetSparker 9:03 Summary 2:06