Bypassing SQL Filters (picoCTF Web Gauntlet)

[@TCMSecurityAcademy]

I hope you enjoyed this video! If so, please consider dropping a like and subscribing.

[@jacobebrock]

I do not do enough practice in SQL... This is mind BLOWING to me. You have taught me more than I have been able to google search in years in this video.

[@michaelgirma6161]

the first 3 stages teach a good lesson. "A defender needs to cover all the flaws to succeed, while an attacker only needs 1."

[@kingmekrillinme4831]

Please do some more of these! This alone helped me greatly and i have studied lots of places and it went over my head until meow!

[@abhishekdebnath2084]

Very methodical way of explaination. Awsome

[@princepatwari365]

Great videos sir, you really help me a lot in my journey..... Thank you

[@ajeetdev]

Really you are great and teaching in easy way is awesome. Really you are my best mentor. Lots of love from india ❤️

[@kartibok001]

What a great way to walk through the process - thank you :)

[@sohanmanju]

I used to think who's Nursultan on discord and why is he going live on Twitch and uploading videos too often. Today I clicked it and realised it was actually TCM

[@JonGarrett001]

Thanks for the great video's and thanks for todays lecture for our class. It was great and very informative.

[@xB-yg2iw]

This challenge is quite new from the pico Mini 2020 that run through october, probably the main reason the solves are lower

[@ayodub]

I have a question about the challenge where they ban the usage of 'admin' and you have to concatenate the string. I thought that if you use authentication bypass it usually doesn't matter what you type the username as, and that the username doesn't even need to necessarily exist. For example: adsfgr' OR 1=1 -- would have the same result as: admin' OR 1=1 -- Why is it required that the user, in this case 'admin' actually exists?

[@Aarun3096]

As Always... Thanks for your Information on the SQL Bybass CTF..

[@ayodub]

Do many of these not work in PostgreSQL? I'm using a training platform with postgresql backend which has almost no filters, and the first 3 solutions: admin'; -- and admin'; don't seem to work for me, I don't really understand why.

[@yoshi5113]

Terimakasih ilmunya.. love from your udemy student here...😁

[@vbhacker]

So you could use adm | | ‘in’ ; in all the steps and it would work

[@salonigupta3760]

You are great!!! It seems so easy to learn from you...

[@cem6247]

Hey Adams, In order to understand SQL injection should I learn SQL ? Is there any course you recommend on it?

[@cableraju9702]

Waiting for OSINT 😢

[@snoppgubbe2310]

how would the actual admin log in if admin is filtered?

[@victormorga325]

really cool video, great tricks! I would be stuck in the 4th round

[@Tobi_Jones]

great, please do more of these

[@mehkpentester5824]

That really nice, Thank You.

[@vpnonline5897]

Pls upload more videos for sql injection

[@koloxd3]

Nice video, great explanation :) Thank You

[@ksboi29]

Great information

[@ayushgoyal8591]

How can we use union without knowing the no. of columns ??pls explain

[@isinduwickramasekara9786]

I watched half of the stream

[@poroshahmed9451]

Just wow... Thanks for this

[@DigitalTrendzy2023]

hey the challenge is still not over

[@putubisa9842]

Thank you for share this bro

[@rodricbr]

awesome, really helped me!

[@Joshua1_7sc]

That was very helpful

[@ankurraj193]

Awesome!

[@cobra-de1]

thank you so much

[@uaman11]

bro how do you know this

[@shaikjilani8242]

TRY A VIDEO ON BEST LAPTOP CONFIGURATIONS NEDDED TO START HACKING

[@shaikjilani8242]

@@thaddaeusaramaic2680 I AM SO POOR BRO THAT'S WHY I AM ASKING ABOUT LAPTOP

[@DigitalTrendzy2023]

admin';-- in this ; is for what in this statement

[@cem6247]

anyone knows the best course for SQL injection ?

[@NicolastheThird-h6m]

Just learn some basic mysql . There are some great videos in youtube . Understanding the syntax of sql will help you a lot .

[@micahrobinson7024]

Great system, you cannot use your username to login

[@AP-qs2zf]

nothing works

[@Alfonso013]

how come double dash ' -- ' become comment? comment is !-- right??

[@NicolastheThird-h6m]

Thats for html . For sql its -- .For mysql its /**/ . (Html is a markup language)

[@nockandfire1360]

#Notificationsquad

[@ashiqrahman3299]

First

[@error_6062]

Good for you

[@beetlenut6980]

Ayy I'm early