Burp Suite/SQL Injection: Difference between revisions

Revision as of 16:11, 21 May 2023

This page covers how to perform SQL Injection attacks with Burp Suite.

Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

Lab: SQL injection vulnerability allowing login bypass

https://portswigger.net/web-security/sql-injection/lab-login-bypass
https://www.youtube.com/watch?v=ML3aGaloczI
lab doesn't require burp suite, just feeding SQL queries into login form
guessing SELECT firstname FROM users WHERE username='admin' AND password='admin'

@@ Line 3: / Line 3: @@
 ==Burp Suite Training Labs==
-Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data https://portswigger.net/web-security/sql-injection/lab-retrieve-hidden-data
+Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
+* https://portswigger.net/web-security/sql-injection/lab-retrieve-hidden-data
+* https://www.youtube.com/watch?v=alTceRdSxS0
+* lab doesn't require burp suite, just tinkering with URL parameters
-* This lab contains a SQL injection vulnerability in the product category filter. When the user selects a category, the application carries out a SQL query like the following: <code>SELECT * FROM products WHERE category = 'Gifts' AND released = 1</code>
+Lab: SQL injection vulnerability allowing login bypass
-* To solve the lab, perform a SQL injection attack that causes the application to display details of all products in any category, both released and unreleased.
+* https://portswigger.net/web-security/sql-injection/lab-login-bypass
+* https://www.youtube.com/watch?v=ML3aGaloczI
+* lab doesn't require burp suite, just feeding SQL queries into login form
+* guessing SELECT firstname FROM users WHERE username='admin' AND password='admin'
+*