강의

N
챌린지

멘토링

N
클립

로드맵

BEST
Security & Network

/

Computer Security

Advanced SQL Injection Attack Techniques Explained by a Simulated Hacking Practitioner: PART 2

The second lecture on SQL Injection, taught by a mock hacking practitioner! The first lecture covered the basics and the core principles of attacks, while the second lecture is about technical advanced attack techniques. Therefore, taking the first lecture is a must!

(4.9) 24 reviews

485 learners

  • crehacktive
Penetration Testing
Injection

Reviews from Early Learners

What you will learn!

  • SQL Injection application attack technique

  • Advanced SQL Injection Attack Techniques

  • New Blind-Based SQL Injection

Advanced/Applied SQL Injection Attack Techniques You've Never Seen Before!
We present a new direction for mock hacking attacks.

📖 A series of SQL Injection attacks taught by a mock hacking expert!

  • PART(1) : Basics / Practical Attacks / Secure Coding ◀ Previous lecture
    This training covers the most important content in SQL Injection attacks. You can learn attack techniques used in practice from the basics, various countermeasures, and secure coding. This is a required training that serves as the basis for subsequent training.

 

  • PART(2) : Application / Advanced / Advanced ◀ Current lecture
    This is training on applied attack techniques and advanced attack techniques not covered in PART (1).

 

  • PART(3) : Making an automated tool ◀ To be made
     This is a training course that applies the attack techniques learned to an automation tool to create a Python-based automation tool.

📖 Differences between SQL Injection Part 1 & 2!

If the previous lecture Part (1) was about the basics and principles of attacks, and the core theory and practice of attacks, this lecture covers the technical aspects of SQL Injection attacks . Therefore, Part (1) is the backbone of this lecture, so it is recommended that you take Part (1) first and then Part (2).

📖 How have SQL Injection attacks been carried out?

If any of the items below apply to you, you can solve them quickly and easily through this lecture!

  • Have you ever been unable to attack in an environment where there are no posts on the bulletin board, or have you ever conducted a time-based attack?
  • When performing Error-Based or Union-Based attacks, didn't you extract data one by one?
  • In a Blind-Based attack, didn't you make at least 7 requests to infer one character?
  • Did you know that file download vulnerability attacks are possible in the file download function linked to a database?
  • Did you know that data retrieval attacks via Union-Based attacks are possible for file download functions linked to a DB?

 

💡 Why you absolutely must take this course!

This lecture covers not only known attack techniques, but also techniques that we discovered through our own research rather than well-known attack techniques. This attack technique presents a new direction for Blind-Based SQL Injection attacks !

The lecture also covers how this attack technique can be used to query data faster and more effectively than previously known attack techniques!

So... practitioners must definitely take this course, right!?

📖 Provides PHP-based practice bulletin boards for each DBMS!

We provide a practice bulletin board based on PHP-MYSQL, PHP-MSSQL, and PHP-ORACLE, through which you can practice SQL Injection for various DBMS.

🙋🏻‍♂️ Questions Q&A

Q. Can I understand Part (2) lecture if I haven't taken Part (1) lecture?
A. I highly recommend that you take the Part (1) lecture. I also recommend that you take this lecture after you have a sufficient understanding of SQL Injection attacks. If you have not taken Part (1) but have sufficient knowledge of SQL Injection attacks, there will be no major problems in taking Part (2), but there may be terms used or content that you are not familiar with, so I recommend that you take Part (1) if possible.

Q. Is this an attack technique that can be applied directly in practice?
A. Yes, of course! It can be applied immediately and attacks can be made more efficiently than existing technologies.

Q. Is there any information about countermeasures?
A. No, there isn't. For the countermeasures, please refer to the Part (1) lecture.

💡 Must-see lectures

Basic SQL Grammar for Successful SQL Injection Attacks
Basic Steps to Learn SQL Injection Attacks
SQL Injection Attack Techniques and Secure Coding: PART 1
SQL Injection Core Lecture! The Basics and Principles of Attacks!

※ Nanum font provided by Naver is used in this training PPT.

Recommended for
these people

Who is this course right for?

  • Someone who has basic knowledge of SQL Injection

  • Anyone who is confident about SQL Injection attacks

  • For those who want to know more about SQL Injection attacks

  • Anyone who wants to make SQL Injection attacks faster

Need to know before starting?

  • SQL Basic Grammar

  • SQL Injection Basic Knowledge

  • Understanding SQL Injection Attacks

Hello
This is

26,165

Learners

1,387

Reviews

502

Answers

4.9

Rating

18

Courses

안녕하세요, 크리핵티브입니다.

다년간 다양한 웹 서비스를 진단하고 연구한 경험을 바탕으로, 실무에 바로 적용 가능한 지식을 인프런 플랫폼에서 공유해오고 있습니다.

그리고 웹 해킹 기초를 체계적으로 다룬 『크리핵티브의 한 권으로 끝내는 웹 해킹 바이블』을 집필했습니다. 기초가 부족한 분들께는 이 책으로 학습을 시작하실 것을 권합니다.

 

Curriculum

All

85 lectures ∙ (14hr 43min)

Course Materials:

Lecture resources
Published: 
Last updated: 

Reviews

All

24 reviews

4.9

24 reviews

  • dhjeong8님의 프로필 이미지
    dhjeong8

    Reviews 4

    ∙

    Average Rating 5.0

    5

    31% enrolled

    • kolab님의 프로필 이미지
      kolab

      Reviews 1

      ∙

      Average Rating 5.0

      5

      31% enrolled

      • qwerty1234님의 프로필 이미지
        qwerty1234

        Reviews 17

        ∙

        Average Rating 4.8

        5

        55% enrolled

        Part 2 definitely feels more in-depth. And it's fun because the environment setup is complete. As I wrote in my Part 1 class review, This person is the best in Korea in terms of lecture quality and learning content. Just because you know a lot doesn't mean you're good at teaching. Among those who aren't well-known, there are a few geniuses in Korea who are daily lecturers. In the field of web hacking, this person seems to be one of them. I think I can finish preparing for employment by just watching this person's videos for web hacking. After watching all the remaining lectures, I'll read Part 1 twice and Part 2 twice.

        • ssw237님의 프로필 이미지
          ssw237

          Reviews 4

          ∙

          Average Rating 5.0

          5

          100% enrolled

          It was good.

          • honggi03151569님의 프로필 이미지
            honggi03151569

            Reviews 1

            ∙

            Average Rating 3.0

            3

            100% enrolled

            I'm listening intently

            $127.60

            crehacktive's other courses

            Check out other courses by the instructor!

            Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must KnowCourse Thumbnail

            Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know

            crehacktive

            An introductory course on web hacking for information security beginners and web developers! Start web hacking in a fun way with this course!

            Basic

            Basic

            Penetration Testing, Injection

            Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must KnowCourse Thumbnail

            Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know

            crehacktive

            SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1Course Thumbnail

            SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1

            crehacktive

            SQL Injection, the flower of web hacking, explained by a mock hacking practitioner! Learn attack and defense at the same time.

            Basic

            Basic

            Penetration Testing, Injection

            SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1Course Thumbnail

            SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1

            crehacktive

            XSS attack techniques explained by a mock hacking practitionerCourse Thumbnail

            XSS attack techniques explained by a mock hacking practitioner

            crehacktive

            This lecture covers the king of client attacks, XSS (Cross-Site Scripting). You can systematically learn about the basic concepts of XSS, the attack principles, and most importantly, what process to go through to perform the attack procedure.

            Basic

            Basic

            Penetration Testing, xss

            XSS attack techniques explained by a mock hacking practitionerCourse Thumbnail

            XSS attack techniques explained by a mock hacking practitioner

            crehacktive

            Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking PractitionerCourse Thumbnail

            Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner

            crehacktive

            Easy-to-follow file download vulnerability attack techniques from web hacking beginners to practitioners! File download vulnerability attack techniques and advanced attack techniques used in practice! And how to apply secure coding!

            Basic

            Basic

            Penetration Testing

            Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking PractitionerCourse Thumbnail

            Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner

            crehacktive

            Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1Course Thumbnail

            Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1

            crehacktive

            The ultimate web hacking master! File upload vulnerability attack technique! This is a training that will further improve the students' web hacking skills through a completely different approach from the existing known methods!

            Basic

            Basic

            Penetration Testing

            Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1Course Thumbnail

            Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1

            crehacktive

            Web hacking that teaches you the principles by following along: WebGoatCourse Thumbnail

            Web hacking that teaches you the principles by following along: WebGoat

            crehacktive

            A web hacking course where you can learn, practice, and understand the principles by simply following along with WebGoat problem solving!

            Basic

            Basic

            Penetration Testing, WebGoat

            Web hacking that teaches you the principles by following along: WebGoatCourse Thumbnail

            Web hacking that teaches you the principles by following along: WebGoat

            crehacktive

            File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]Course Thumbnail

            File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]

            crehacktive

            The ultimate web hacking! File upload vulnerability attack technique! Part 2 of the 'Part 1' education follows Part 1 and covers more advanced techniques.

            Intermediate

            Intermediate

            Penetration Testing, Java, Web Shell

            File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]Course Thumbnail

            File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]

            crehacktive

            File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical EnvironmentsCourse Thumbnail

            File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments

            crehacktive

            The ultimate web hacking! File upload vulnerability attack technique! Following Part 1, Part 2 '3rd part' education covers more advanced techniques in depth.

            Intermediate

            Intermediate

            Penetration Testing

            File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical EnvironmentsCourse Thumbnail

            File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments

            crehacktive

            File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web FirewallsCourse Thumbnail

            File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls

            crehacktive

            The ultimate web hacking! File upload vulnerability attack technique! Part 2 of the '2nd part' education follows Part 1 and covers more advanced techniques.

            Intermediate

            Intermediate

            Penetration Testing

            File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web FirewallsCourse Thumbnail

            File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls

            crehacktive

            File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack MethodologyCourse Thumbnail

            File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology

            crehacktive

            The ultimate web hacking! File upload vulnerability attack technique! Part 2 of the 'Part 1' education follows Part 1 and covers more advanced techniques.

            Intermediate

            Intermediate

            Penetration Testing

            File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack MethodologyCourse Thumbnail

            File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology

            crehacktive

            One-point lesson on web security for creating a secure websiteCourse Thumbnail

            One-point lesson on web security for creating a secure website

            crehacktive

            In this course, you will learn how to create secure web services.

            Basic

            Basic

            One-point lesson on web security for creating a secure websiteCourse Thumbnail

            One-point lesson on web security for creating a secure website

            crehacktive

            OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and SecurityCourse Thumbnail

            OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security

            crehacktive

            We will take a closer look at the working principles through core theories and practices of the OAuth 2.0 protocol. And we will analyze the OAuth 2.0 protocol from the perspective of hacking and security.

            Intermediate

            Intermediate

            Penetration Testing, OAuth

            OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and SecurityCourse Thumbnail

            OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security

            crehacktive

            Skill-Up! Create a web shell that you can learn and use right awayCourse Thumbnail

            Skill-Up! Create a web shell that you can learn and use right away

            crehacktive

            Web shell is the core tool for file upload vulnerability attacks! Let's learn how to create a web shell together through this lecture~!

            Basic

            Basic

            Web Shell, Bootstrap

            Skill-Up! Create a web shell that you can learn and use right awayCourse Thumbnail

            Skill-Up! Create a web shell that you can learn and use right away

            crehacktive

            Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection SolutionsCourse Thumbnail

            Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions

            crehacktive

            Basic understanding of web shells and web shell detection solutions, as well as attack methods and obfuscation techniques for bypassing them!

            Basic

            Basic

            Penetration Testing, Web Shell

            Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection SolutionsCourse Thumbnail

            Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions

            crehacktive

            Basic SQL Grammar for Successful SQL Injection AttacksCourse Thumbnail

            Basic SQL Grammar for Successful SQL Injection Attacks

            crehacktive

            The basic steps to learn SQL injection attacks, the flower of web hacking! This is a lecture on basic SQL grammar!

            Basic

            Basic

            SQL, Penetration Testing, MySQL

            Basic SQL Grammar for Successful SQL Injection AttacksCourse Thumbnail

            Basic SQL Grammar for Successful SQL Injection Attacks

            crehacktive

            Talk about web hacking and mock hacking in the fieldCourse Thumbnail

            Talk about web hacking and mock hacking in the field

            crehacktive

            Introduction to web hacking and mock hacking for those who are new to web hacking and job seekers in related fields

            Beginner

            Beginner

            Penetration Testing

            Talk about web hacking and mock hacking in the fieldCourse Thumbnail

            Talk about web hacking and mock hacking in the field

            crehacktive

            Web technology basics you must knowCourse Thumbnail

            Web technology basics you must know

            crehacktive

            This is a course where you can learn the basics of web technology. You can learn the basics of web technology in a short period of time. If you are interested in studying or getting a job related to the web, you must take this course!

            Beginner

            Beginner

            Penetration Testing

            Web technology basics you must knowCourse Thumbnail

            Web technology basics you must know

            crehacktive

            Similar courses

            Explore other courses in the same field!

            SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1Course Thumbnail

            SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1

            crehacktive

            SQL Injection, the flower of web hacking, explained by a mock hacking practitioner! Learn attack and defense at the same time.

            Basic

            Basic

            Penetration Testing, Injection

            SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1Course Thumbnail

            SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1

            crehacktive

            XSS attack techniques explained by a mock hacking practitionerCourse Thumbnail

            XSS attack techniques explained by a mock hacking practitioner

            crehacktive

            This lecture covers the king of client attacks, XSS (Cross-Site Scripting). You can systematically learn about the basic concepts of XSS, the attack principles, and most importantly, what process to go through to perform the attack procedure.

            Basic

            Basic

            Penetration Testing, xss

            XSS attack techniques explained by a mock hacking practitionerCourse Thumbnail

            XSS attack techniques explained by a mock hacking practitioner

            crehacktive

            Mock Hacking Job Preparation, Interview Preparation CourseCourse Thumbnail

            Mock Hacking Job Preparation, Interview Preparation Course

            boanproject

            This lecture provides a general guide on how to prepare while studying when you want to choose a career in IT security penetration testing, and what questions and answers to prepare for the interview. I will share my experience working as a penetration testing consultant, at large companies, and in the financial sector, and currently running a penetration testing consulting business.

            Beginner

            Beginner

            Penetration Testing, Tech Interview

            Mock Hacking Job Preparation, Interview Preparation CourseCourse Thumbnail

            Mock Hacking Job Preparation, Interview Preparation Course

            boanproject

            Understanding AWS Cloud Service Infrastructure Construction, Hacking, and SecurityCourse Thumbnail

            Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security

            boanproject

            IT services are rapidly transitioning to cloud environments. You will learn security practices from basic virtual infrastructure construction to security threat monitoring and vulnerability diagnosis for each area to secure the Amazon AWS cloud environment.

            Basic

            Basic

            AWS, Penetration Testing

            Understanding AWS Cloud Service Infrastructure Construction, Hacking, and SecurityCourse Thumbnail

            Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security

            boanproject

            Web technology basics you must knowCourse Thumbnail

            Web technology basics you must know

            crehacktive

            This is a course where you can learn the basics of web technology. You can learn the basics of web technology in a short period of time. If you are interested in studying or getting a job related to the web, you must take this course!

            Beginner

            Beginner

            Penetration Testing

            Web technology basics you must knowCourse Thumbnail

            Web technology basics you must know

            crehacktive