SQL injection Lab 1 vulnerability in WHERE clause allowing retrieval of hidden data
Автор: Saga Learns
Загружено: 2026-02-08
Просмотров: 12
Описание:
We will be covering the 1st lab for SQL Injection for Portswigger Web Security Academy.
This lab contains a SQL injection vulnerability in the product category filter. When the user selects a category, the application carries out a SQL query like the following:
SELECT * FROM products WHERE category = 'Gifts' AND released = 1
To solve the lab, perform a SQL injection attack that causes the application to display one or more unreleased products.
--
Join along at Portswigger:
https://portswigger.net/web-security
SQL Injection Labs:
https://portswigger.net/web-security/...
More information on SQL Injection:
https://owasp.org/www-community/attac...
--
Feedback is welcome.
If you found value, please leave a sub and a like. Maybe share it?
Повторяем попытку...
Доступные форматы для скачивания:
Скачать видео
-
Информация по загрузке: