SQL Injection (SQLi)

Challenges

• SQL injection attack, querying the database type and version on Oracle
• SQL injection attack, querying the database type and version on MySQL and Microsoft
• SQL injection attack, listing the database contents on non-Oracle databases
• SQL injection attack, listing the database contents on Oracle
• SQL injection UNION attack, determining the number of columns returned by the query
• SQL injection UNION attack, finding a column containing text
• SQL injection UNION attack, retrieving data from other tables
• SQL injection UNION attack, retrieving multiple values in a single column
• Blind SQL injection with conditional responses

Misc

• SQL Injection using raw hash output

Resources

• What is SQL Injection? Tutorial & Examples | Web Security Academy
• SQL injection cheat sheet | Web Security Academy
• PayloadsAllTheThings/SQL Injection