Скачать или смотреть TryHackMe-Nahamstore SQL Injection (Task 12 )

00:00-Intro
01:43-Setting up BurpSuite and logging every request
06:30-Intercepted every request now trying to explain where to find SQL Injection
09:20-Dont stop here Look For Blind SQL Injection
10:15-Downloading SQL injection wordlist from ORWA ATYAT github repo
11:41-Using Intruder to test for Blind and simple SQL Injection
14:23-Explaining HackerOne Report SQLi in Language parameter
15:23-Another thing to try for SQLi changing parameteres to Array
17:54-Simple and Blind SQLi in POST requests
19:50-Explaining to Find SQLi On register and login pages and IP ROTATE extension in BurpSuite
26:43-Changing Request method of Register to GET and testing sqli
27:50-Found ID parameter and testing for Manual sql injection
31:50-Sqlmap to getting Critical Information and getting the first flag
34:29-Trying to find SQLi in the URLs as well
35:40-Getting SQLi in the POST request on the return page
36:49-(Very Important) Testing Post parameters one by one in sqlmap and finding flag 2 and completing the tasks
40:35 (BONUS PART ) Tips to find sql injection using GOOGLE DORKS and SHODAN DORKS