SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1

2. Environment Building Overview

4. Setting magic_quotes_gpc in your php.ini file

5. Change MYSQL Initial Password

6. ORACLE Installation and PHP Integration

7. MSSQL Installation and PHP Integration

8. Installing DBeaver, a DB client program - (Revised: 2023.11.26)

9. Installing a PHP-based bulletin board

10. A word of advice before starting training

11. [Additional] How to resolve problems that occur during the MSSQL installation process or PHP integration test process

12. [Added] How to intercept only the desired requests and responses in Buffsuite and save the settings

14. Understanding web applications and dynamic resources

15. Is this a web-dependent attack?

16. Accident Cases

19. Attack points from SQL perspective

20. Attack Principle

21. Cause of vulnerability occurrence

22. Attack Type

23. Vulnerability Assessment Methodology (1)

24. Vulnerability Analysis Methodology (2)

25. Vulnerability Analysis Methodology (3)

26. Types of SQL injection statements

27. Vulnerability Analysis Methodology (4) - (Revised: 2022.06.22)

28. Utilization of CASE WHEN statement (1) - (Added: 2022.06.22)

29. Utilization of CASE WHEN statement (2) - (Added: 2022.06.22)

30. Utilization of CASE WHEN statement (3) - (Added: 2022.06.22)

31. [Practice 2-1] Vulnerability Analysis Practice

32. Correct analysis method through analysis of search function operation principle

33. [Practice 2-2] How to properly check for vulnerabilities in the search function

34. [Practice 2-3] Correct vulnerability check method for column parameters of search function

35. [Practice 2-4] Correct vulnerability check method for table parameters in a prepared statement environment

36. Why You Must Perform Vulnerability Analysis with a Web Proxy Tool, Not a Web Browser - (Added: 2023.09.27)

37. What is an authentication bypass attack?

38. Understanding the Authentication Function

39. [Practice 3-1] Creating a PHP-based login function

40. Attack Analysis

41. [Practice 3-2] Practice of authentication bypass attack

42. [Practice 3-3] Practice of unauthorized viewing of secret posts through authentication bypass attack

43. [Practice 3-4] Practice of unauthorized modification and deletion of other users' posts through authentication bypass attack

44. [Practice 3-5] Introduction to Lord SQL Injection War Game

45. [Practice 3-6] (LOS-Authentication Bypass) 1 problem solution

46. [Practice 3-7] (LOS-Authentication Bypass) 2 Problems Solution

47. [Practice 3-8] (LOS-Authentication Bypass) 3 Problems Solved

48. [Practice 3-9] (LOS-Authentication Bypass) 5 questions

49. [Practice 3-10] (LOS-Authentication Bypass) 6 questions

50. Why Learn Authentication Bypass Attacks?

52. Data lookup attack detailed process

53. Environmental Analysis

54. [Practice 4-1] Environmental Analysis Practice

55. Classification and Understanding of Attack Techniques

56. Selecting an attack technique

57. Understanding and Need for Sequential Record Output for Data Retrieval Attacks

58. [Practice 4-2] MYSQL sequential record output

59. [Practice 4-3] MSSQL sequential record output

60. [Practice 4-4] ORACLE sequential record output

61. If you do not need to use the sequential record output grammar - (Added: 2022.07.14)

62. Metadata is the core of data retrieval attacks

63. How to approach metadata from an attack perspective

64. Data dictionary by DBMS

65. [Practice 5-1] MYSQL metadata listing

66. [Practice 5-2] Listing MSSQL metadata

67. [Practice 5-3] ORACLE metadata cataloging

68. In closing the metadata, a word of advice

69. What is an ERROR-BASED attack?

70. Differences in attacks by DBMS

71. Attack Process

72. MSSQL ERROR-BASED ATTACK VERIFICATION

73. [Practice 6-1] MSSQL ERROR-BASED Attack Practice

74. [Practice 6-2] MYSQL ERROR-BASED Attack Practice

75. [Practice 6-3] ORACLE ERROR-BASED Attack Practice

76. [Practice 6-4] How to effectively find DBMS errors

77. Starting a data lookup attack, ending an ERROR-BASED attack

78. What is a UNION-BASED attack?

79. Attack Suitability Review

80. [Practice 7-1] Determining whether UNION attack is possible by creating a function to check for duplicate IDs

81. Understanding UNION

82. Difference between UNION and UNION ALL

83. [Practice 7-2] UNION and UNION ALL Practice

84. Key points you must know for a successful attack

85. Attack Process

86. Attack Verification (1)

87. Attack Verification (2)

88. Why we need to find out the number of columns using the ORDER BY clause - (Added: 2020.11.19)

89. [Practice 7-3] Practice of checking execution of ORDER BY and UNION statements

90. Attack Verification (3)

91. [Practice 7-4] MYSQL UNION-BASED attack practice, functional differences between list and detailed view

92. [Practice 7-5] MSSQL UNION-BASED Attack Practice

93. [Practice 7-6] ORACLE UNION-BASED Attack Practice

94. [Practice 7-7] Attack practice on ID duplication lookup function that allows UNION-BASED attack

95. [Practice 7-8] Unauthorized local file viewing through MYSQL UNION-BASED attack

96. UNION-BASED attack that enables various application attacks

97. What is a BLIND-BASED attack?

98. Attack Process

99. Types of BLIND-BASED attack techniques

100. Types of data inference techniques

101. Data Inference Techniques (1)

102. [Practice 8-1] Data Inference Technique (1) Practice (feat. Using Burp Suite Intruder)

103. Data Inference Techniques (2)

104. [Practice 8-2] Data Inference Techniques (2) Practice

105. Data Inference Techniques (3)

106. [Practice 8-3] Data Inference Technique (3-1) Practice (feat. Using Burp Suite Intruder)

107. [Practice 8-4] Data Inference Techniques (3-2) Practice

108. BLIND-BASED attacks ultimately involve the use of automated tools

109. Causes of vulnerability occurrence and responses

110. Outline of response measures

111. Detailed response plan (1)

112. [Practice 9-1] Prepared Statement Vulnerable Source Code and Secure Source Code

113. Detailed response plan (2)

114. [Practice 9-2] Implementing a vulnerable login function into a secure login function (applying secure coding)

115. Detailed response plan (3)

116. [Practice 9-3] PHP-MYSQL Practice Bulletin Board Secure Coding Application

117. [Practice 9-4] PHP-MSSQL Practice Bulletin Board Secure Coding Application

118. [Practice 9-5] PHP-ORACLE Practice Bulletin Board Secure Coding Application

119. If you know the attack, you can see the defense!

120. Roadmap for SQL Injection Attacks

122. Additional areas to practice - (Added: 2022.06.22)

123. Finishing the training