CyCube
Intermediate

SQL Injection

Practical SQL Injection: understand risks, perform login bypass and UNION-based techniques, map databases, and apply defenses for secure web apps.

Duration
2h 26m
Labs
2
Videos
4

Skills Acquired

  • Explain how SQL Injection works and common impact
  • Perform and detect login bypass via SQLi
  • Use UNION-based SQLi to enumerate and extract data
  • Understand database mapping techniques used by attackers
  • Apply practical mitigations and secure query patterns

Curriculum

  1. Introduction
    • SQL Injection overview and risks
  2. Login Bypass
    • Authentication bypass with SQLi
    • Hands-on practice: login bypass
  3. UNION-Based SQL Injection
    • UNION-based techniques
    • Database mapping and enumeration
    • Hands-on practice: UNION-based SQLi

Included in these pathways