Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Pentest Handbook: SQL Injection To Shell Uploading
Rating: 4.5 out of 5(191 ratings)
17,491 students

Pentest Handbook: SQL Injection To Shell Uploading

Learning SQL Injection By Doing Complete Project including Detection, Exploiting, and uploading shell
Created byPentest Handbook
Last updated 10/2021
English
English [Auto],

What you'll learn

  • How to install Penetration Testing Labs in Virtual Machines
  • How to Detect SQL Injection Vulnerability
  • How to Exploit SQL Injection Just By Using Browsers
  • Uploading Shell and Bypassing Restrictions
  • Working With CMD Shell and Running Commands

Course content

3 sections • 11 lectures • 1h 34m total length

  • Introduction to virtual machines4:04

    Learn to set up penetration testing labs with virtual machines, choosing between VMware Workstation Pro or Player and Oracle VM VirtualBox, and using Ovalle Hub dot com for vulnerable machines.

  • Introduction to Vulnhub Website6:49

    Explore Vulnhub to practice hacking with vulnerable machines, focusing on sql injection and sql injection to shell labs, and download lab files for VMware or VirtualBox, including OWASP top 10.

  • Installing SQL injection to shell Vulnerable machine13:25

    Install and configure the SQL injection to shell vulnerable labs in VMware, including ISO setup, OWASP broken valve application, and NAT networking for IP discovery.

  • Network Adapter Troubleshooting10:11

    Troubleshoot vulnerable-machine network issues by adding two adapters (NAT and bridged), applying changes, and using ifconfig to obtain an IP address for lab access.

Requirements

  • No Programming experience needed. You will learn everything you need to know

Description

SQL injection vulnerability is one of the OWASP Top 10. In this course, we are teaching you how to perform penetration testing  step by step. We are going to focus on SQL injection vulnerability.  We start from scratch, so everyone who has no prior knowledge should not be worried about understanding the course. We present the concepts in a simple way. This course is divided into three main sections.

Section 1 : How to set up your own hacking lab

  • Introduction to virtual machines

  • Introduction to Hacking Labs Resources

  • Installing SQLI to shell Lab

  • Network Adapter Troubleshooting

Section 2: SQL Injection Workshops

  • Break and fix the query

  • Finding number of columns

  • Finding vulnerable columns

  • Union Select Attacks

  • Database information

  • Finding the databases

  • Finding the tables

  • Finding the columns

  • Dump the data

  • Decrypting Hashed Password

Section 3: How To Upload Shells And Bypass Upload Restrictions

  • Uploading CMD shell

  • Bypassing Upload Restrictions

  • Working with CMD Shell

At the end of the course, you will be able to perform information gathering, crawl the web application, detect SQL injection vulnerability, work with developer tools in browser, run query to dump the data, upload a shell, and run some commands to get information about the server and web application.

Who can benefit from this course?

  • Everyone who is interested in learning penetration testing as a career.

  • Everyone who is interested in teaching cyber security

  • Everyone who is tired of watching useless tutorials

What is next step?

  • Stay Tuned for OWASP Labs Courses


Who this course is for:

  • Anybody who wants to learn Penetration Testing From Zero To Hero
  • Anybody who wants to start a Career as a pentester
  • Anybody who wants to learn and teach ethical hacking

Report abuse