HACKR.GG
Injection

SQL Injection

Learn how attackers manipulate database queries through unsanitised input — and bypass logins, extract data, and own the backend.

Beginner50 min17 lessons4 hands-on
Start free →I have an account
Free account. No credit card.

You'll be able to

  • ✓Understand how unsanitised input breaks out of SQL query context
  • ✓Perform login bypass, UNION-based, and error-based SQLi manually
  • ✓Extract database schema, tables, and data with blind techniques
  • ✓Identify SQLi sinks in URL parameters, headers, and JSON bodies

Lessons

  1. 177 Million Accounts — Sony's Worst Week
  2. 2What is SQL?
  3. 3How SQL Injection WorksHANDS-ON
  4. 4Types of SQL Injection
  5. 5Real-World Impact
  6. 6Prevention & Secure Code
  7. 7Your Turn: Bypass the LoginHANDS-ON
  8. 8Level Up: Extract the DataHANDS-ON
  9. 9Tool — sqlmap
  10. 10Practice: SQL Login Bypass
  11. 11UNION Injection — Extracting Data from Other Tables
  12. 12Practice: UNION Data Extraction
  13. 13Error-Based SQLi
  14. 14Blind Boolean and Time-Based SQLi
  15. 15Second-Order SQLi and WAF Bypass
  16. 16Final quiz
  17. 17Hands-on Lab: Exploit Shoppr AdminHANDS-ON
Start free →