Skip to main content
grasp.study
About
Explore
Pricing
Log in
Try it for free
Back to course
👋
Welcome to a Grasp lesson
Create a free account
to keep studying and create your own study path.
SQL for Cyber Security
·
Module 8
Foundational SQL Injection Attacks
1
Understanding SQL Injection: Risks and Defenses
Define SQL injection and explain why it is a critical security vulnerability.
SQL Injection: Triggering Database Errors
Use single-quote injection to break a SQL query and trigger database error messages.
SQL Injection: Authentication Bypass
Perform an authentication bypass using a tautology-based injection (e.g., ' OR '1'='1').
4
Blind SQLi: ORDER BY Column Enumeration
Determine the number of columns in the original query using ORDER BY injection.
5
UNION SELECT for Data Retrieval
Inject UNION SELECT statements to retrieve data from a different table.
6
UNION-Based Injection: Extracting Database Version and Metadata
Extract database version and metadata through UNION-based injection.
Hands-on SQL Injection Practice
Practice foundational injection techniques on a deliberately vulnerable web application.
Previous module
The Web Application & Database Connection
Next module
Advanced Manual SQL Injection