SQL Injection - Lab #8 SQLi attack, querying the database type and version on MySQL & Microsoft

[@RanaKhalil101]

Interested in supporting me and gaining early access to the Web Security Academy videos when they're recorded? Consider buying my course: academy.ranakhalil.com/p/web-security-academy-video-series! ✨ ✨

[@omarataallah9451]

hi , you really did a great job, i can't imagen that is there someone in the world can give this massive amount of information about specific vulnerability, since you did it with the manual way , can you give one last lesson using an automated tool such as sql-map ?

[@mostafasayed2783]

جزاكى الله خيرا ونفعك وزادك من فضله فى الدنيا والاخرة بأذن الله

[@danielazulay1528]

A well-written script. Conventions, debugging & clean code. Nice!

[@paco6266]

Fenomenal Rana. Al final aprenderé a programar python gracias a ti. Gracias

[@zy7236]

At 3:00, you say what ever category you filter on, the content get to displayed on the page, that is how we know this web app is vulnerable to UNION based SQLi, why? can you explain a bit in detail? Thanks!

[@rameesreza6138]

This is the first time i saw ur video by youtube recommendation, ur explanation and detailed view are awesome friend. i have always question y and what ? i found out my answers when i saw ur video. Thank you so much friend.

[@urklegizmo]

I guess that the # symbol is being interpreted as an anchor symbol. Like when you use and then it jumps to element that has the id attribute of "some_title" 🤔 Amazing course by the way! Top notch quality 👌

[@cybersec-radar]

Much appreciated.... keep it up thanks alot.

[@محمدرضاجعفری-غ2ث]

Great👏

[@md_daud]

thank you!!!

[@afaqamjad1382]

assalamualaikum nor the double dash nor the doble dash and space and nor the hash is working on i don't know mam

[@an00n38]

I still get internal error despite using ' order by 1#

[@semasema9004]

It a matter of encoding special characters. If you are entering //' order by 1# // directly into address bar of your browser, use %23 instead of #. Or use Burp. Burp will encode # itself.

[@parikshithbilchode5765]

@@semasema9004 SUPER

[@kimo9885]

Pls can you drop a social media link apart from Twitter so I can ask you questions please,like Facebook

[@mustafaadip4990]

' UNION SELECT @@version, NULL#