Niflheim World

Welcome to Niflheim !

  • First 5 messages from new users (pre-moderated user) will be checked for flood/spam before being posted on the forum. Users will also be checked for a multi-account.
    If you want to communicate without delay, get a free Huscarl status (how to get - User Groups), or buy premium status to see all hidden content (how to buy - Premium status)

    The administrator has only one telegram - @ftmadmin and our chat - Link on chat

Mastering SQL Injection - The Ultimate Hands-On Course

  • Thread starter User_37997
  • Start date
  • Replies 2
  • Views 3K

U

User_37997

Guest

Requirements

  • Basic knowledge of computers (i.e. how to use the internet).
  • Basic knowledge of web fundamentals (HTTP requests, methods, cookies, status codes, etc.).
  • Basic knowledge of SQL commands and query structure.
  • Latest version of Kali Linux VM (free download).
  • PortSwigger Web Security Academy account to access the labs (free registration).
  • Basic knowledge of Python Scripting.
Description
For the longest time, up until a few years ago, SQL Injection fell under the number one most critical security risk facing web applications today. Although the vulnerability itself is simple to learn and exploit, it can potentially lead to disastrous consequences that leave an organization open to severe risks such as sensitive information disclosure, authentication bypass and even remote code execution.
In this course, we dive into the technical details behind SQL Injection vulnerabilities, the different types of SQL injection vulnerabilities, how to find them from both a black-box and a white-box perspective and cover the different ways to exploit SQL injection vulnerabilities. We also go through prevention and mitigation techniques on how to prevent and mitigate these types of vulnerabilities.
This is not your average course that just teaches you the basics of SQL Injection. This course contains over 9 hours worth of content that not only describes the technical details behind SQL Injection vulnerabilities, but also contains 18 labs that give you hands-on experience exploiting real-world examples. The labs are of varying difficulty levels starting with really simple examples and slowly moving up in difficulty.
If you're a penetration tester, application security speciality, bug bounty hunter, software developer, ethical hacker, or just anyone interested in web application security, this course is for you!
Who this course is for:
  • Penetration testers that want to understand how to find and exploit SQL injection vulnerabilities.
  • Software developers that want to understand how to defend against SQL injection vulnerabilities.
  • Bug bounty hunters that want to understand how to find and exploit SQL injection vulnerabilities.
  • Individuals preparing for the Burp Suite Certified Practitioner (BSCP) exam.
  • Individuals preparing for the OSWE certification.
 
shape1
shape2
shape3
shape4
shape7
shape8
Top