SQL Injection Essentials
Module-kan waxaad ku baraneysaa SQL injection, qaabka loo ogaado (detect) iyo sida loo exploit-gareeyo, iyo weliba sida xogta xasaasiga ah ee database-ka loogala so baxo adigoo isticmaalaya labs aan ku diyaarinay. Kooras…
What you'll learn
Skills you walk away with after finishing this track.
- Waxaad fahmi doontaa waxa uu yahay SQL injection iyo sababta uu u dhaco.
- Waxaad baran doontaa sida loo aqoonsado input fields-ka iyo parameters-ka u nugul SQL injection.
- Waxaad awoodi doontaa inaad detect-gareyso SQL injection adigoo adeegsanaya application responses iyo errors,
- Waxaad baran doontaa sida loo soo saaro xog uusan application-ku ugu talagalin inuu soo bandhigo.
- Waxaad awoodi doontaa inaad bypass-gareyso nidaamyada login-ka iyo authentication-ka ee vulnerable-ka ah.
- Waxaad baran doontaa sida loo isticmaalo SQL comments si aad u beddesho ama u tirtirto qaybo ka mid ah original query-ga.
- Waxaad awoodi doontaa inaad fuliso weerarada UNION-based SQL injection.
- Waxaad baran doontaa sida loo ogaado tirada columns-ka uu soo celiyo vulnerable query.
- Waxaad awoodi doontaa inaad aqoonsato columns-ka soo bandhigi kara xogta string-ga ee waxtarka leh.
- Waxaad baran doontaa sida xog looga soo saaro database tables-ka kale.
- Waxaad awoodi doontaa inaad isku darto multiple database values si looga dhigo hal output column.
- Waxaad baran doontaa sida loo ogaado nooca database-ka (database type) iyo version-kiisa.
- Waxaad awoodi doontaa inaad hesho magacyada database tables-ka iyo columns-ka.
- Waxaad baran doontaa sida loola so baxo usernames, passwords, iyo records-ka kale ee xasaasiga ah.
- Waxaad fahmi doontaa sida blind SQL injection uu uga duwan yahay visible SQL injection.
- Waxaad awoodi doontaa inaad fuliso boolean-based blind SQL injection.
- Waxaad awoodi doontaa inaad fuliso conditional-error blind SQL injection.
- Waxaad baran doontaa sida loo aqoonsado qaababka (patterns) jilicsan ee SQL query-ga.
- Waxaad fahmi doontaa sida parameterised queries ay uga hortagaan SQL injection.
- Waxaad awoodi doontaa inaad aqoontaada ku dabaqdo qiimayn tijaabo ah oo kama dambays ah (practical final assessment).
About this course
SQL Injection Essentials waa module aad ku baraneyso sida SQL injection vulnerabilities uga soo muuqdaan web applications-ka, sida attackers-ku u helaan, iyo sida database queries-ka jilicsan loo bedbedeli karo si loo ogaado xog ay ahayd in la ilaaliyo. Bedelkii diiradda la saari lahaa aragti (theory) oo keliya, koorasku wuxuu isku darayaa sharaxaad cad iyo hands-on labs, taas oo kuu ogolaanaysa inaad farsamo kasta adigu ku tajaabiso labs-ka aan ku diyaarinay.
Waxaad ku bilaabi doontaa inaad barato sida loo detect-gareeyo SQL injection iyo inaad fahamto dabeecadda inputs-ka vulnerable-ka ah. Kadib waxaad ku tababaran doontaa soo saarida xogta qarsoon, ka gudbida (bypassing) nidaamyada login-ka, iyo isticmaalka SQL comments si aad u beddesho sida original query-ga loo process-gareeyo.
Koorasku wuxuu kadib u gudbayaa UNION-based SQL injection. Waxaad baran doontaa sida loo ogaado tirada columns-ka uu soo celiyo query-gu, helida columns-ka soo bandhigi kara xog waxtar leh, kasoo saarida records-ka database tables kale, iyo isku darka multiple values si ay u noqdaan hal result.
Waxaad sidoo kale baran doontaa sida loo enumerate-gareeyo database-ka adigoo aqoonsanaya noociisa (type) iyo version-kiisa, ogaanaya tables-ka iyo columns-ka, iyo sido loo aqriyo credentials-ka records-ka tables kale ee database-ka ku jiro. Blind SQL injection ayaa sido kala baran doontaa, oo ay ku jiraan authentication bypass, boolean-based techniques, iyo conditional-error attacks.
Ugu dambayn, waxaad baran doontaa sida looga hortago SQL injection vulnerabilities iyadoo la isticmaalayo parameterised queries. Koorasku wuxuu ku dhammaanayaa qiimayn wax ku ool ah (practical assessment) oo tijaabinaysa awoodaada inaad detect-gareyso, fahamto, oo aad exploit-gareyso SQL injection vulnerabilities adigoo isticmaalaya farsamooyinka aad ku baratay kooraska dhexdiisa.
Start SQL Injection Essentials today
Join the SomHack academy and build real, employable cyber skills with hands-on labs in your own language.