SQL Injection — Roadmap Step & Resources
Manipulating a vulnerable query to read, modify or exfiltrate database data
- Level: intermediate
- Estimated time: 2 days
- Roadmap: Cybersecurity Analyst / Ethical Hacker
Before this step
Mini projects
- Find and exploit a SQL injection vulnerability in a deliberately vulnerable app
Study resources
- SQL Injection (Article) — PortSwigger's Web Security Academy — the definitive, free, hands-on resource for SQL injection.
- FREE Practical Ethical Hacking course from The Cyber Mentor (Video) — The Cyber Mentor's legendary, hugely popular 15-hour free ethical hacking course, widely used as OSCP prep material.
Part of
- Web Application Security — section
- Cybersecurity Analyst / Ethical Hacker roadmap — the full learning path