Advanced SQL Injection Attack — TryHackMe Walkthrough

TryHackMe's Web App PenTest -- Advanced SQL Injection:
https://tryhackme.com/room/advancedsqlinjection

00:00 Introduction to SQL Injection
00:21 Types of SQL Injection
00:41 In-band SQL Injection Techniques
01:10 Inferential SQL Injection Techniques
02:10 Out-of-band SQL Injection Techniques
03:52 Second Order SQL Injection
04:58 Practical Example: Book Review Application
06:40 Backend Code Analysis
17:59 Filter Evasion Techniques
18:45 Character Encoding Methods
39:03 No Code SQL Injection Techniques
49:19 Introduction to SQL Injection Bypass Techniques
49:52 Case Manipulation and Inline Comments
50:17 Alternate White Spaces and Logical Operators
50:52 Obfuscation and Encoding Techniques
51:25 Real-World Pen Testing Considerations
52:16 Out of Band SQL Injection Explained
55:43 Database-Specific Out of Band Techniques
01:01:13 Practical Example: Exfiltrating Data
01:11:32 Advanced SQL Injection Techniques
01:28:26 Automation Tools for SQL Injection
01:32:04 Best Practices and Mitigation Measures
01:40:28 Conclusion and Final Thoughts