Skip to main content
grasp.study
About
Explore
Pricing
Log in
Try it for free
Back to course
👋
Welcome to a Grasp lesson
Create a free account
to keep studying and create your own study path.
SQL for Cyber Security
·
Module 9
Advanced Manual SQL Injection
1
Blind SQLi: Boolean-Based Exploitation
Perform blind Boolean-based SQL injection by observing differences in application responses.
2
Time-Based Blind SQL Injection with Delay Functions
Perform blind time-based SQL injection using database-specific delay functions (e.g., SLEEP, pg_sleep).
Blind SQL Injection: Character-by-Character Extraction
Extract data character-by-character using SUBSTRING and ASCII/ORD functions in a blind injection attack.
4
Executing Multiple SQL Statements with Stacked Queries
Use stacked queries (e.g., using ';') to execute multiple SQL statements if supported.
5
Second-Order SQLi Explained
Describe the conditions for a second-order SQL injection vulnerability.
6
Exploiting Second-Order SQL Injection
Craft and execute a payload to exploit a second-order SQL injection vulnerability in a sample application.
SQL Injection: Local File Disclosure
Use SQL injection to read local server files (e.g., LOAD_FILE) where database permissions allow.
Previous module
Foundational SQL Injection Attacks
Next module
Automated Injection with sqlmap