From the course: Ethical Hacking: SQL Injection
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Checking out SQLI Labs
From the course: Ethical Hacking: SQL Injection
Checking out SQLI Labs
- [Instructor] Before we finish the course, you may want to set up your own SQL injection lab to deep-dive more advanced SQL injections. There's an interesting set of PHP files which can be used to practice SQL injections, known as the SQLI labs. These have been created by a user called Audi-1. And while the presentation is a bit juvenile, they can be quite useful as a test bed. We'll need to install the latest php7 version of the labs, which we can get from the skyblueee site shown here. Okay, let's install the files. I'm in my var/www/html folder and I'll sudo git clone https://github.com/skyblueee/sqli-labs-php7.git. And I'll change the folder name to SQLI for ease of use. Sudo mv sqli-labs-php7 sqli. We can now start Apache and MySQL. Service apache2 start && service mysql start. We need to set up a user account for the lab. Let's do that. Sudo mysql -u root, and we'll create user 'sqliuser'@;localhost'…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
-
(Locked)
Inferring TRUE when blind2m 47s
-
(Locked)
Using prepared SQL queries2m 24s
-
(Locked)
Getting our first sqlmap injection5m 35s
-
(Locked)
Sanitizing input to SQL3m 1s
-
(Locked)
Inserting an SQL injection via Burp Suite1m 5s
-
(Locked)
Following up with a second injection6m 31s
-
(Locked)
Defeating the WAF5m
-
(Locked)
Navigating a complex injection11m 21s
-
(Locked)
Using request messages to inject SQL5m 24s
-
(Locked)
Checking out SQLI Labs5m 53s
-
(Locked)
-