SQL Injection CTFs in Sinhala | Portswigger Labs | Web Security

Описание: This is a Sinhala language walkthrough of the PortSwigger Labs SQL Injection labs. I demonstrate common SQL injection vulnerabilities step by step, identifying and exploiting them on MySQL, PostgreSQL and Oracle, including UNION based, error based and blind injections and other techniques, all explained in Sinhala.

🔗 Resources
Blog : https://blog.destinyoo.com/Writeups/P...

📌 Chapters / Timestamps
00:00 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
03:20 SQL injection vulnerability allowing login bypass
06:30 SQL injection UNION attack, determining the number of columns returned by the query
09:07 SQL injection UNION attack, finding a column containing text
12:14 SQL injection attack, querying the database type and version on Oracle
16:08 SQL injection attack, querying the database type and version on MySQL and Microsoft
18:30 SQL injection attack, listing the database contents on non-Oracle databases
26:30 SQL injection attack, listing the database contents on Oracle
31:46 SQL injection UNION attack, retrieving data from other tables
34:50 SQL injection UNION attack, retrieving multiple values in a single column
38:30 Blind SQL injection with conditional responses
46:26 Blind SQL injection with conditional errors
52:28 Blind SQL injection with time delays
52:55 SQL injection with filter bypass via XML encoding
01:01:03 Blind SQL injection with out-of-band interaction
01:05:11 Blind SQL injection with out-of-band data exfiltration

💬 Join Heshan Streams WhatsApp Channel for live notifications and events :
https://bit.ly/heshanpererawhatsapp

☁️ Join the official Discord server :
https://bit.ly/heshanstreamsdiscord

🌎 Websites :
Main : https://destinyoo.com
Blog : https://blog.destinyoo.com
Portfolio : https://about.destinyoo.com

🎙️ Daily Streams and Content :
   / @heshankperera  

Exercises and lab scenarios from PortSwigger Labs (portswigger.net). This video is for learning and awareness.

#cybersecurity #websecurity #portswiggerlabs