SQL Injecting Beyond Strict Filters - Union Without Comma

Name: SQL Injecting Beyond Strict Filters - Union Without Comma
Uploaded: 2023-10-02T12:40:40Z
Channel: IppSec
Description: 00:00 - Introduction 01:57 - Showing the trick and explaining why its important to understand the methodology behind finding the technique and not just ...

IppSec · Beginner ·🔐 Cybersecurity ·2y ago

00:00 - Introduction 01:57 - Showing the trick and explaining why its important to understand the methodology behind finding the technique and not just the technique itself 03:50 - Going over the Flask App 05:45 - Showing Snyk highlighting the SQL Injection, then talking a little bit about Snyk and why it is awesome. 08:00 - Running the webserver and explaining why DEBUG mode should always be disabled 09:30 - Running SQLMap to inject into the URL Parameter 11:00 - Manually discovering the SQL Injection through good enumeration, and showing a Burpsuite URL Encoding Quirk 12:50 - SQLMap showed n…

Watch on YouTube ↗ (saves to browser)

Chapters (17)

Introduction

1:57 Showing the trick and explaining why its important to understand the methodolo

3:50 Going over the Flask App

5:45 Showing Snyk highlighting the SQL Injection, then talking a little bit about S

8:00 Running the webserver and explaining why DEBUG mode should always be disabled

9:30 Running SQLMap to inject into the URL Parameter

11:00 Manually discovering the SQL Injection through good enumeration, and showing a

12:50 SQLMap showed nothing, Run SQLMap again but this time make sure it starts with

13:20 Going into the code to show why exploitation is hard, I'm using Pydantic to do

17:36 Showing how SQLMap discovered there were 4 columns without using a comma, than

18:55 Enumerating for bad characters with FFUF by putting characters after the SQL C

21:30 Showing SQLFiddle, which is a great way to play and test SQL Queries

24:05 Eliminating comma's from the Union Injection with (select * from (select 1) as

26:00 Testing the SQL Injection against our web application

28:55 Securing the code and fixing the SQL Injection via prepared statement

31:30 Showcasing Github Copilot Chat to help fix our code

35:00 Fixing a XSS Issue, then rerunning Snyk to show all vulnerabilities are fixed

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →