If you want to master SQL injections, open this thread!

SQL injection attacks are vulnerabilities that can allow attackers to access ANY data in a victim's database!🤯

A Thread 🧵👇

[1️⃣] SQL injection by @PortSwigger

When talking about web vulnerabilities, PortSwigger academy is the place to go! Their labs offer a great way to practice your skills as well!

👇 https://portswigger.net/web-security/sql-injection

What is SQL Injection? Tutorial & Examples | Web Security Academy

In this section, we'll explain what SQL injection (SQLi) is, describe some common examples, explain how to find and exploit various kinds of SQL injection ...

[2️⃣] Cheatsheet by @pentest_swissky

With so many different kinds of databases out there, you're definitely going to want a good cheatsheet to quickly look up what you need. PayloadsAllTheThings is perfect for that!

👇 https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/SQL%20Injection

PayloadsAllTheThings/SQL Injection at master · swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - PayloadsAllTheThings/SQL Injection at master · swisskyrepo/PayloadsAllTheThings

GitHub

[3️⃣] Hacking with SQLi by @secaura_

This is one of the BEST videos out there on SQL injections. I've never had so much fun whilst learning!

👇 https://youtu.be/_Y4MpvB6o7s

[4️⃣] Sqlmap by @bdamele and @stamparm

SQLmap is THE tool when it comes to finding SQL injections. There is just nothing there that comes even close to what sqlmap can do!

👇 https://sqlmap.org/

sqlmap: automatic SQL injection and database takeover tool

[5️⃣] Sqlmap in Burp by @codewatchorg

This BurpSuite extension allows you to launch SQLMap scans from within Burp, and it's amazing!

👇 https://portswigger.net/bappstore/f154175126a04bfe8edc6056f340f52e

SQLiPy Sqlmap Integration

Initiates SQLMap scans directly from within Burp.

@Intigriti you can also use sqlmaps dns collaborator dns features to find blind SQL injection.
https://portswigger.net/bappstore/e616dc27bf7a4c6598cfeeb70d5ca81c
SQLMap DNS Collaborator

Helps you perform DNS exfiltration with Sqlmap with zero configuration needed.