SQL Injection | Complete Guide

In this video, we cover the theory behind SQL injection vulnerabilities, how to find these types of vulnerabilities from both a white box and black box perspective, how to exploit them and how to prevent them.
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Web Security Academy Series Course: academy.ranakhalil.com/p/web-...
Mastering SQL Injection - The Ultimate Hands-On Course: www.udemy.com/course/masterin...
▬ Contents of this video ▬▬▬▬▬▬▬▬▬▬
00:00:00 - Introduction
00:02:03 - What is a SQL injection vulnerability?
00:33:44 - How to find SQL injection vulnerabilities?
00:46:49 - How to exploit SQL injection vulnerabilities?
01:00:27 - How to prevent SQL injection vulnerabilities?
01:10:23 - Resources
01:11:13 - Summary
01:11:37 - Thank You
▬ Links ▬▬▬▬▬▬▬▬▬▬
Video slides: github.com/rkhal101/Web-Secur...
Introduction to the Web Security Academy Series video: • Introduction to the We...
Web Security Academy: portswigger.net/web-security
Web Application Hacker’s Handbook: Chapter 9 Attacking Data Stores
OWASP - SQL Injection: owasp.org/www-community/attac...
OWASP - SQL Prevention Cheat Sheet: cheatsheetseries.owasp.org/ch...
PentestMonkey - SQL Injection: pentestmonkey.net/category/che...
Rana's Twitter account: / rana__khalil
Hacker Icon made by Freepik: www.freepik.com

[@RanaKhalil101]

Interested in supporting me and gaining early access to the Web Security Academy videos when they're recorded? Consider buying my course: academy.ranakhalil.com/p/web-security-academy-video-series! ✨ ✨

[@bigbrain786]

i don't have money to purchase .

[@omarc900]

@@bigbrain786 $29 save up.

[@i_youtube_]

Is buying the course is intended to support you or there is an additional content added in the paid course.

[@SauravKumar-if4to]

I don't have money 🥺🥺 so i come here to see

[@eonraider4180]

Your video material is actually way better than the instructions provided in the academy itself. The guys at the academy would be crazy not to approach you to incorporate your material into their platform.

[@RanaKhalil101]

your comment made my day!

[@eonraider4180]

@@RanaKhalil101 That's great! I'm glad I found your write-ups too. It's just sheer competence right there. Keep up the good work.

[@gg-ps1vz]

@@eonraider4180 GG twitter.com/PortSwigger/status/1366714766895550469?s=19

[@comosaycomosah]

This

[@sporkaccione]

Amazing work, I'm looking forward to the rest of this series!!

[@davneg01]

Thanks so much, very clear, appreciate all of your hard work behind the scenes

[@davidobber6788]

WOW! Excellent video that clearly explains how we have to think twice (or more) before feeling safe!

[@nOneimportant11192a]

You are AMAZING! Thank you so much for all the effort and time to bring such an excellent content to the community. You are an inspiration!

[@GabrielLawrence_gebl]

This is great. Thanks for doing it. Shared it with my whole team.

[@jotunheim1491]

Thank you so much, amazing work. Actually it's the most up-to-date work, covering everything from a white/grey/black box perspective. Again, thank you! You are awesome :D

[@barebears289]

You're the best! I love your work, and I have learned a lot from you! You deserve a million subs. Tysm😄

[@kydo2540]

Huge fan! Been following you since the days of your medium writeups. Thank you for your content, you have undoubtedly upgraded my infosec career. Keep doing what you are doing. Hope you continue with videos on this subject matter.

[@mystriux5676]

This is amazing. Your video is really easy to understand and I love it! Please continue working on this

[@Hendrix312002]

This video is incredibly helpful and insightful. I really look forward to the other videos in this series. Thank you!

[@absoluteepic1703]

Best explanation I would say, simple and straight! Very helpful, thank you!

[@ig101g3]

Your work is amazing!! I’m excited for more content

[@andrespino8552]

Wow. This is gold. Thank you very much for taking the time to make this incredible material.

[@gavinLovesMetallica]

Thank you Rana for helping us learn!!! More power to you!

[@Lwyte17]

Your material answers all the questions I have when doing the lab's when I think of "what if..." and it really helps complete the whole picture. Will probably sign up soon when I have some time and money!

[@brunocarrazza500]

Hey Rana! greetings from Brazil!! Thanks for the great work and content you've been putting up. Looking foward to see your next videos!!!

[@anonymous6666]

Oh my goodness. Thanks so much for your hard work, it was super helpful and your video seems professionally made💙

[@semasema9004]

Rana, thank you so much for this video! You explain complex topics so simply and clearly! Great!

[@ragnarlothbrok367]

You are doing great job teaching! I wish I could have your determination and attention to detail!

[@neerajkharwar6141]

thanks for uploading this video I was constantly looking for the resource to study this topic and I finally found this video... it is very helpful

[@mohammedal-shaboti7939]

Your methodology of testing is great. Well done!

[@mian_al_ruhanyat]

I always hate theory but your theory videos are so practical that you can't imagine. It's helping me a lot.

[@CodeXND]

Thank you for your hard work .. lots of information packed into this video.

[@bobbychase5616]

so much information!
will be following with the series

[@myoaye6225]

The best instruction on SQL injection!

[@janricmalate6793]

Great content, I learned a lot about sqli. I'm looking forward to learn more from your future videos.

[@MrNightowl1980]

I think that you and the company you work for are amazing! Thank you for these vids!🙂

[@esadecimale]

Reviewing some of these things to fresh up my memory in order to create my own content on the subject (but in italian), and well, excellently explained, thank you very much!

[@ehabahmedyassen]

Thank you so much for your amazing course, your effort and your time! I really like the consistency in the slides format & flow of explanation for each topic and how you organise the playlists for each topic with short and long versions 😊

[@suryaasurya2350]

Amazing work. Thanks for providing awesome stuff for free of cost.

[@juandaxp3851]

Great work!! Thank you for sharing your knowledge. Looking forward to learning a lot through your channel! :)

[@mohammadmaniruddin7921]

Completed the whole video. Going for the next one. Thank you so much for sharing the awesome knowledge ❤️

[@Aditya-xe3de]

Really appreciate your efforts and time you put into making these tutorials , these are really helpful and qualitative .also expecting Such more tutorials based on the course ahead . again thank you for sharing your knowledge you're giving back to the community in the amazing way.🙌

[@prabakarj4797]

Wow!! Simply awesome! Finally I found a channel which Deep dive into the SQL injection!

[@josekiki1587]

The great super explanation I deeply loved it and waiting for more series from you.

[@shankaranand7761]

Very comprehensive and insightful. Never had anyone explain SQL injection in such a manner. Was very easy to follow through. Thank you. Great work! Awaiting more content.👍

[@lizardking5303]

My new favourite content creator! Thank you so much for this

[@dhairyanagda1672]

Great work! Thank you for doing this. Really means a lot to us beginners❤️ Looking forward to more such informative videos👍

[@irfanullah9375]

I am here after watching the Broken access vulnerability topic with David Bombal. The way of your teaching is outstanding and thanks for sharing such a valuable knowledge.

[@zahidazafar7696]

incredibly impressed this is fantastic

[@haziqamzar5332]

Assalammualaykum, greetings from Malaysia. There's so much information. Great work! Looking forward next video.

[@KyleRichter23]

I just subscribed. You are very easy to understand and I am excited for more SQL content.

[@sefaxbounter9456]

Thanks a lot, im watching it another time because its useful !!

[@stabgan]

Your voice is so soothing. Loved your content. Subscribed

[@daniyalahmed7034]

Nicely explained. Great job Rana... Will be following you in entire series.

[@hacktrader29]

I am totally new to this world , but your video is good to understand. Thanks

[@rodrigoa.cascao1553]

I found out about your work on David Bombal's channel. Your channel is fantastic!

[@paultidwell8799]

Thank you, I understand so much better now.

[@syedtajuddin5446]

Amazing explanation. very clear and right to the point.

[@srlsec]

Concise and straight to the point

[@panduancloud4699]

This is first youtube video without dislike i have ever seen. NICE and thank you for the tutorials.

[@5ql156]

Thaaank you so much for your videos Rana and the way you make them and time to create them and everything!! much appreciated ♥♥

[@artistepromotionz9183]

This is the Best Sql explanation on youtube! Keep up the good work👍

[@osaze61]

Outstanding information, looking forward to continuing the lectures....Thank you

[@nageshv6476]

I just wanna say Thank You!. Your videos are awesome.

[@user-oo4on5lg9m]

with this guide, its easy to understand SQLI , thank u

[@bakeery]

Subhallah! This is what I spend so many months looking for, finally gotten it for free, Thanks alot for the resources.

[@goldtoothgod]

Thank you so much.your making this so easy to understand

[@MerajKhan-lk2tb]

Great content,thank you so much👍..after searching a lot of video finally got it right video

[@choyanhalder1211]

This video is so important for beginner.Thanks a lot mam for your great initiative.please keep it continuous.

[@faux3250]

This was extremely helpful! As someone who was a bit lost in the Web Security Academy this helped fill in the gaps so much. Thank you for this!

[@xWarPlays]

You are awesome for this!! Thank you!!

[@fahadbawazir1771]

MASHALLAH, PROFESSIONAL WAY OF PRESENTATION

[@user-cw7im3cu5i]

Thank you for your knowledge. You are paving the way to knowledge for ordinary people

[@RunOs3]

Thank you for posting just a great and informative video. I hope all your dreams come true.

[@chiragagrawal7856]

Thanks for sharing the proper content with us. Your voice makes it more attractive to understand 😊👌

[@gluonboson]

This presentation is realy realy useful for beginners or students , it explains every details of the topic and and has example of queries and payloads for real-life stuations . Please keep going to do it for young collegues and students. Thank you for your effort.

[@vishalcv3263]

Your teaching methodolgy is really amazing. I have no previous tech experience a complete newbie with some basic knowledge and I completey understand what is being explained. Thank you so much for putting in so much of time and efforts and keep up the good work ma'm.

[@abubakarahmad8014]

It's just amazing and so informative.
Thank you so much.☺️👍

[@ElyT0]

Thank you so much for this amazing explanation!!!!

[@pauraspatil9314]

Nicely Explained!
Thank You!

[@malcrack1]

This was awesome content. Thanks for this one. Soon I will enroll in your course in the website.

[@boneitch]

These videos are so awesome that I'm watching and taking notes on New Year's Eve, and I'm truly enjoying myself. Thank you! (And happy new year!)

[@RanaKhalil101]

This comment made my day! Happy new year!

[@gokuls3931]

Loved it.. Pls don't stop this series.. ♥

[@SquareZeroGaming]

im glad that i found your channel 1 month ago.. such good content mashallah. keep the contents coming ^_^

[@JorgeTorres-ud5iw]

Thankyou Rana :D , the complexity is explained very well

[@a.sstudio6321]

Love from Pakistan....simple and easy way of teaching...

[@muhammadhasnaatarshad8591]

Amazing way of teaching It was very helpful
Thank you!

[@mrsuli1624]

Mashaallah Sister, I'm proud that I learned from you😊❤

[@hatab0x]

wow I can't get enough of your videos, especially this one

[@farisalshareef107]

You know I have never wrote a single comment in TH-cam but your videos make me do it . Thank you so much for your video and please keep it up 👏

[@debarghyadasgupta1931]

Big promoter of your amazing content. Thanks for sharing with the community. 🙏

[@2012mrmoh]

مشاء الله عليكي. ربنا يزيدك علم

[@paco6266]

Buenas tardes Rana, te he conocido gracias a un video que realizaste con David Bombal, y me pareció fantástico y tu super simpatica. Soy una persona normal y corriente, y he tenido recientemente una mala experiencia con una empresa realizando trading, bueno ya te puedes imaginar. Jamás pensé que llegara a ser tan incrédulo. Me gusta mucho como te explicas y lo puedo comprender todo hasta ahora. Nunca es tarde para aprender. Voy a ver que tal empiezo con tus tutoriales y si me llenan como hasta ahora, aportaré al canal de la manera que pueda para que sigamos aprendiendo de tus habilidades.
Un saludo.

[@somebodycommented]

I liked this video even before starting. I love the givers !! Sply rahana I follow you in twitter. Tha ks for sharing your knowledge. Keep going great ! Love you voice too ❤️

[@abudujanah4453]

Mashaa Allaah Very helpful to my dream

[@dbuludag]

I am looking forward see rest of the content soon

[@yamashita8822]

You were definitely made for this ❤‍🔥❤‍🔥❤‍🔥❤‍🔥🔥🔥🔥🔥❤❤❤❤❤❤perfect content

[@CodeWithComments]

Nice tutorial. 👍 I wanna see more tutorials from different topics. 😊

[@abdalrahman_raafat]

Really great video, thank you

[@michaelfarmer16]

This is awesome work thank you for your insight. Keep it up :)

[@HumberNum]

Thank you so much for the great explanation
keep going 👏👏

[@guliver1999]

Easy to follow explanation. Great presentation! -:)

[@logosmaxima2775]

Where have you been all my life? Please continue working on this. This is great!

[@hilalkhan8446]

Yes........ and You comment ( My heart's words).

[@charlesdanny1824]

Well done, I am really impressed and a very informative one. Please keep up you good work and expecting more video.

[@merazhussain6022]

What an amzaing content. Your way of explanation is simple yet covers everything. Kudos to youand keep going :)

[@samdevatechno2779]

Great efforts and quality video...Thank you so much..

[@i_youtube_]

I like your content. You are great instructor. I like your unique voice too. Thank you so much.