Web Vulnerability Assessment Special Lecture #1 (SQL Injection) - Anyone Can Start

introduction

This lecture is a follow-up lecture to the practical lecture, “Diagnosing Web Vulnerabilities Even Beginners Can Do (Major Information and Communication Infrastructure)” .
Among them, we focus on SQL Injection (SQLi) attacks, which are frequently found in actual fields.

SQL Injection (SQLi) is the most common and critical attack technique in web application security.
This lecture covers the core concepts of SQLi step by step, from Schema Enumeration to understanding the DB structure , to Data Extraction techniques to extract actual data.

It is structured around practice so that you can follow along without any separate development knowledge.
You can try attacking a web server directly and even experience graph visualization.
**This is a practical lecture that covers not only “How to Attack” but also “Why is it dangerous” and “How to defend”**.

I recommend this to these people

• Security officer who first started working on web vulnerability diagnosis

• Practitioners preparing to inspect vulnerabilities in key information and communication infrastructure

• Cybersecurity beginners who are new to SQL Injection practice

• For those looking for web hacking analysis methods that can be applied directly to practice

What you learn in class

• How SQL Injection Works and Major Attack Methods

• SQLi practice including Union, Blind, Time-Sleep, etc.

• Schema Enumeration to Diagram DB Structure

• Extract account information with Data Extraction

• Data visualization practice using pyvis