Burp Suite/SQL Injection
From charlesreid1
This page covers how to perform SQL Injection attacks with Burp Suite.
Burp Suite Training Labs
Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data https://portswigger.net/web-security/sql-injection/lab-retrieve-hidden-data
- This lab contains a SQL injection vulnerability in the product category filter. When the user selects a category, the application carries out a SQL query like the following:
SELECT * FROM products WHERE category = 'Gifts' AND released = 1 - To solve the lab, perform a SQL injection attack that causes the application to display details of all products in any category, both released and unreleased.