SQL Injection Attacks- The Guide

SQL Injection Attacks: The Guide, available at Free, has an average rating of 4.75, with 13 lectures, based on 402 reviews, and has 37415 subscribers.

You will learn about See, in action, the power of SQL injections You will attack applications legally & safely Learn defense controls to protect your applications and databases from SQL injections Perform SQL injections by hand and with automated tools Learn about various SQL injection techniques Look at vulnerable code and learn how to make it secure This course is ideal for individuals who are Web Developers or Pentesters or Database administrators or Software Developers or Cloud Engineers or Application Security Engineers or Risk Analysts It is particularly useful for Web Developers or Pentesters or Database administrators or Software Developers or Cloud Engineers or Application Security Engineers or Risk Analysts.

Enroll now: SQL Injection Attacks: The Guide

Summary

Title: SQL Injection Attacks: The Guide

Price: Free

Average Rating: 4.75

Number of Lectures: 13

Number of Published Lectures: 13

Number of Curriculum Items: 13

Number of Published Curriculum Objects: 13

Original Price: Free

Quality Status: approved

Status: Live

What You Will Learn

See, in action, the power of SQL injections

You will attack applications legally & safely

Learn defense controls to protect your applications and databases from SQL injections

Perform SQL injections by hand and with automated tools

Learn about various SQL injection techniques

Look at vulnerable code and learn how to make it secure

Who Should Attend

Web Developers

Pentesters

Database administrators

Software Developers

Cloud Engineers

Application Security Engineers

Risk Analysts

Target Audiences

Web Developers

Pentesters

Database administrators

Software Developers

Cloud Engineers

Application Security Engineers

Risk Analysts

About the course:

Welcome to this course on SQL injection attacks! In this course, we explore one of the biggest risks facing web applications today.

We start out by creating a safe and legal environment for us to perform attacks in. Then, we cover the core concepts of SQL and injections. After that, we learn SQL injection techniques with the help of cheat sheets and references. At that point, we start to gather information about our target in order to find weaknesses and potential vulnerabilities.

Once we’ve gathered enough information, we go full-on offensive and perform SQL injections both by hand and with automated tools. These attacks will extract data such as tokens, emails, hidden products, and password hashes which we then proceed to crack.

After successfully attacking and compromising our targets, we take a step back and discuss defensive controls at the network, application, and database layers. We also look at actual vulnerable code and show ways of fixing that vulnerable code to prevent injections.

Please note: Performing these attacks on environments you do not have explicit permissions for is illegal and will get you in trouble. That is not the purpose of this course. The purpose is to teach you how to secure your own applications.

–

Topics we will cover together:

1. How to set up a Kali Linux Virtual Machine for free

2. How to configure and create safe & legal environments using containers inside of Kali

3. How to get started with OWASP ZAP(a free alternative to Burp Suite)

4. A quick refresher of what SQL is and how it works

5. An explanation of what SQL injections are and how they work

6. SQL injection techniques with cheat sheets and references

7. How to gather information about your target in order to find potential vulnerabilities

8. How to perform SQL injections by hand with a proxy tool (ZAP)

9. How to perform SQL injections with automated tools (SQLMap)

10. How to use results from successful and unsuccessful injections to further exploit the application(ie: crack passwords)

11. How to defendagainst SQL injections at the network layer

12. How to defendagainst SQL injections at the application layer

13. How to defendagainst SQL injections at the database layer

14. How to find vulnerabilities by looking at code

15. Proper coding techniques to prevent SQL injections

–

Requirements:

To understand how SQL injections work and how to perform them as well as defend against them, you must have:

Experience working with web applications

Experience with SQL

Suggestion: You may also wish to take our free Introduction to Application Security (AppSec) course to familiarize yourself with the concepts of Application Security.

–

Instructor

My name is Christophe Limpalair, and I have helped thousands of individuals pass IT certifications and learn how to use the cloud for their applications. I got started in IT at the age of 11 and unintentionally fell into the world of cybersecurity.

As I developed a strong interest in programming and cloud computing, my focus for the past few years has been training thousands of individuals in small, medium, and large businesses (including Fortune 500) on how to use cloud providers (such as Amazon Web Services) efficiently.

I’ve taught certification courses such as the AWS Certified Developer, AWS Certified SysOps Administrator, and AWS Certified DevOps Professional, as well as non-certification courses such as Introduction to Application Security (AppSec), Lambda Deep Dive, Backup Strategies, and others.

Working with individual contributors as well as managers, I realized that most were also facing serious challenges when it came to cybersecurity.

Digging deeper, it became clear that there was a lack of training for AppSec specifically. As we explore in the course, SQL injections are far too common and can be devastating to organizations.

It’s time to take security into our own hands and to learn how to build more secure software in order to help make the world a safer place! Join me in the course, and we’ll do just that!

I welcome you on your journey to learning more about SQL injections, and I look forward to being your instructor!

Course Curriculum

Chapter 1: Introduction

Lecture 1: Course and author introduction

Chapter 2: Getting Started

Lecture 1: Setting up safe and legal environments to attack

Lecture 2: Getting started with OWASP ZAP

Lecture 3: Reviewing important SQL concepts

Chapter 3: SQL Injection Attacks

Lecture 1: SQL injections explained

Lecture 2: Cheat sheets and references

Lecture 3: Information gathering

Lecture 4: SQL injection attacks by hand

Lecture 5: Mounting an attack with SQLMap

Chapter 4: Defenses Against SQL Injections

Lecture 1: Defending the network layer

Lecture 2: Defending the application layer

Lecture 3: Defending the database layer

Chapter 5: Conclusion and additional resources

Lecture 1: Conclusion and additional resources

Instructors

Christophe Limpalair
Co-Founder of Cybr and developer at heart

Cybr Training
Were here to help you build your cybersecurity career

Rating Distribution

1 stars: 6 votes

2 stars: 6 votes

3 stars: 38 votes

4 stars: 142 votes

5 stars: 210 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!