Burp Suite/SQL Injection

This page covers how to perform SQL injection attacks with Burp Suite.

Burp Suite Training

SQL Injection Labs

Main article: SQL Injection

https://portswigger.net/web-security/sql-injection

Lab 1: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

• https://portswigger.net/web-security/sql-injection/lab-retrieve-hidden-data
• https://www.youtube.com/watch?v=alTceRdSxS0
• lab doesn't require burp suite, just tinkering with URL parameters
• single quotes raising internal errors are a sign of SQL Injection vulnerability

Lab 2: SQL injection vulnerability allowing login bypass

• https://portswigger.net/web-security/sql-injection/lab-login-bypass
• https://www.youtube.com/watch?v=ML3aGaloczI
• lab doesn't require burp suite, just feeding SQL queries into login form
• guessing SELECT firstname FROM users WHERE username='admin' AND password='admin'
• single quotes raising internal errors are a sign of SQL Injection vulnerability
• if at first you don't succeed, try, try again: admin, administrator, etc etc etc
• https://www.youtube.com/watch?v=fMPvCyD2v4w
• This is another version of the same lab, but using the Python requests library

SQL Injection UNION Attacks

Main article: SQL Injection/UNION Attack

https://portswigger.net/web-security/sql-injection/union-attacks

Lab 3: SQL injection UNION attack, determining the number of columns returned by the query

• https://portswigger.net/web-security/sql-injection/union-attacks/lab-determine-number-of-columns
• https://www.youtube.com/watch?v=umXGHbEyW5I