sql injection with burp suite tutorial

[@georgmc]

i really like your vids bro like it's the perfect amount of switching from the screen to the facecam from time to time and you're speaking very calmly and together with the contents of the vid you make it really enjoyable to watch it

[@earlbenet913]

would you please share it back to me

[@earlbenet913]

would you please share it back to meet

[@teraclenin3594]

Thank you once again....This is exactly what we're learning in class this week. Im going to share this video with the rest of my class mates

[@LoiLiangYang]

Awesome to hear that! Go ahead and share!

[@dominiclundqvist168]

@@LoiLiangYang but this doesent work, it is outdated

[@davidmezei08]

@@dominiclundqvist168 are u OK? Its a 1 week old video...

[@dominiclundqvist168]

@@davidmezei08 yes but the method is super old, if this was possible he obviously wouldn't show it

[@YesAbhi-03]

Learning in class 🧐? Who the hell makes you learn this ?

[@TraceursMonkey]

OWASP 10 was the most beautiful lessons in the beginner curriculum . Thanks for every video you post , your doing such a great job !

[@GaneshKumar-19]

One of the most powerful and helpful tutorial on KZbin

[@nelsontovars]

You are so clear, concise, straight to point, very well switching between content and face cam. This is really worth watching every single minute

[@imperim]

where can i get sql.txt?

[@arunsanthoshra1411]

@@imperim did u get that sql.txt?

[@zilog357]

Only not secure and weak websites will fall with this. But since there are still a lot of them out there, the video is still useful for people to head up and get their sites up to date.

[@martinhector9337]

So my friend, Have you heard about INVESTBIA OPTIONS TRADES where alot of people make much profits these days?

[@p.abhishekchotu324]

Nice and very knowledgeable. Can you explain about the injected payload (SQL.txt)?

[@josesosa5929]

I was following another video and it was a little different. Here I was able to see that you need the symbols at the beginning and end of the email and password like in the video minute 2:52. This video really help me. Thank you Loi!!!

[@LoiLiangYang]

What does JWT stand for?

[@breezebee6568]

Json web token

[@ripples2491]

Json web token

[@cocotoo9621]

Jaddu vala tokan

[@treewisemenllc7281]

Json web token.

[@hackernee5867]

LA CAN TALK ABOUT TECHNOLOGY AND HACKING ETC

[@FedoraRose]

Thank you for teaching Things😁

[@jordanmartinez8652]

Yeah I love things

[@preferableyoutuber5481]

@@jordanmartinez8652 Things like that pfp? 😂

[@NomziliciousFoods]

I really liked your method of conveying knowledge. This was an interesting watch and I did learn a lot from you. Thanks for making videos like this.

[@macbook6507]

Thanks for Teaching us Teacher Loi liang, forever grateful 🤝

[@nadavleor]

i'm learning so much here, thank you very much Loi.

[@blazzingbuzz8678]

This is fantastic. Eternally grateful... long life to you. You are the best

[@theweepingmopper3928]

Works all fine on these "vulnerable" test websites. Try this in real life and none of it will work (unless you can find some website build by a complete idiot). I really don't get why a "pro" keeps coming up with these completely outdated setups.

[@FenderLeader]

Because they want user to pay to learn real $hit 😂

[@carval51]

well if you test it on big website ofc they would not do this stupid mistake, the things is this only happen to new website n1 even bother to hack lol

[@oo7posam581]

Same... But by learning basics and trying them in real world gains experience that helps to Develop and Use your own mind to hack rather than Already available

[@charaxofgythium4863]

the titles are the most anoying :|

[@skijethd2033]

where can i actually learn then i want to learn so bad but this wierd "hacking" youtubers dont help me

[@ramitamondal656]

Hello Sir, First of all thank you for such informative content. It's really helpful. Would you please make a beginner's guide video, for people who want to be self taught in cyber security, beyond their academic curriculum?

[@Daemon4]

feel real bad for the one guy who just wants to sell juice but keeps getting hacked

[@xpiredmemes3739]

XD

[@olajuwon03]

Nice info sir. Really appreciate ur videos

[@marcasplund]

Very easy for beginners... I hope they understand that these techniques are very basic. This type of security flaw is very uncommon anymore. How about doing some more advanced vids. Thanks

[@mahdihasan42]

the explanation is just wow.

[@narindersemar5138]

Hey, fantastic video, where did you get the payloads from?

[@armalite6837]

its installed by default on some linux systems

[@shivp436]

@@armalite6837 can you please tell how to install it on windows

[@ZaneT531]

I wish I had your accent and voice man.. I do teaching to in KZbin Azure tutorials.. You just earned a sub .. I will continue to watch your video and learn. Thanks

[@Ted_James]

At approximately 6:42, why did you remove ,"bid":18, from the token?

[@Arkata]

Wow, Burpe suite is incredible Thanks for sharing mate 👍👌

[@lusialeksieva9947]

Like your vida bro like it' s theperfect amount of swiyching from the screen to the facecam from time to time and you' re

[@GlobusZZ]

Awesome bro. Thanks for you tutorials 👍🏻👍🏻

[@circuitmasters5258]

Loi, PHP susceptible to SQL attacks - can you code the website database to prevent attacks that's what I want - Can you show a video that prevents hackers from gaining access?

[@IndraEkaMandrianaMIIII]

thanks for video, i have question, where can i get the file injection for Load in Intruder ?

[@YesAbhi-03]

Classy intro 🤍🔥

[@Maheshkumar-ji1sv]

Can you teach to create keylogger tool to work in windows and Linux platform?

[@hackernee5867]

LA CAN TALK ABOUT TECHNOLOGY AND HACKING ETC

[@Maheshkumar-ji1sv]

@@hackernee5867 La hacking is said to be creating tool of own also how much of day you will use open source tool , need to learn lot of things .... 😎

[@utorrent6054]

Hello Loi, how to hacker catch opt ? Example. Bank opt .🤔🤔 can you teach us..

[@I4YB]

thank you i love you so much you are give me very good help

[@accessordenied6844]

😯😯take love from🇧🇩

[@mralien0047]

You're the best,, thank you for sharing this stuff with us

[@ghosthunter5336]

Great lesson, I learned a lot today. thanks Loi.

[@DSMLNR]

awesome. the beard looks good dude

[@ferhatsurucu82]

Thank you, What if MFA was enabled

[@veerareddy6087]

You are not a hacker you are the God of hacker

[@ZehraanBarmare]

Please upload a complete VAPT tutorial.

[@sidharthpj4753]

Nobody uses MD5 nowadays..... Try decrypting a bcrypt hash.

[@jonathanfeika]

Guys if I want to start hacking which app I should use on my pc for hacking

[@lifeisbeautiful5998]

Thanks for u kind help ..dear freind 😊😊😊we will remember u better

[@smsport7630]

I love what you Do, but do you think you can break icloud on iphone or yo u think is classified

[@perryamoakojampa125]

can you do this to secure website.....

[@shravankumaruk]

As an OSCP I'm loving it

[@hackernee5867]

LA CAN TALK ABOUT TECHNOLOGY AND HACKING ETC

[@SpartanJoe193]

I us3 Windows 11 and the Burp Community edition

[@GooDog2906]

This lab can be used properly with php and

[@kingpapa3428]

Ah so this could be one of the ways my brothers Roblox accounts get hacked

[@nandanagajyesthasokhyatara81]

what browser do you use ? and if its a non popular one can you send a link of how to download it ? thx if you reply

[@hakeebhussain6764]

how do i get a response from the website

[@accessdenied5998]

btw where did you get the SQL Payload from I wanna try to brute force my own website

[@statuses9772]

Can you make video on home made rubber ducky. Use simple pendrive

[@Bank.Chaabi]

i like your vids

[@aomo5293]

Hello. Please can y talk about Net Guard app? Is it save ? Thank y

[@iyanu3723]

Please how do you mitigate this type of attack. is it by using unique passwords instead of common ones?

[@jamaledineamarir6724]

Prepared SQL statements That way, you do not treat user inputs as intrepetable commands, but as string (or whatever intented type the software is looking for).

[@iyanu3723]

@@jamaledineamarir6724 Thanks. i get that the sql injection attack allows you to log into the account without the password. i was just wondering how to prevent the password being known if the hackers primary objective was to retrieve the password

[@Glockenspiels]

@@iyanu3723 use hash encryption

[@Izayoink_Saccuy]

Tbh social engineering is more reliable

[@kinshukkarmakar3883]

Does this really work with real time web applications ?

[@daniloalbuquerque6655]

U R THE BEST!

[@softwarehubandgamesclub401]

CANT WE ENCODE THAT JSON TOKEN TOKEN ?? IN SOME SITES THEY USE ACCES TOKEN IN COOKIES CAN WE EDIT THEM , THEN ENCODE BACK AND USE IT TO GET ANY ADVANTAGE ?? IT WOULD BE NICE IF U CAN REPLY U R VIDEOS ARE AMAZING

[@ochaparro1335]

Good

[@rahuldadhich497]

Any trick for telegram to add bulk members from another channels??

[@rahuldadhich497]

@anthrax on that available only scraper i want to bulk add members from another channel

[@mahadiislambd]

hello, would you make a video about snmp v3 and how to configure it??????

[@Bordonauu]

What do I do if I get code 200 but still cant get into? Someone help me please

[@s.aravindh6227]

Nice video bro 👍👍

[@rohanpandey7476]

I think u r using professional version instead of community version

[@cryze385]

Ok, but how do you get in the Account of someone in particular?

[@abdetr0_177]

I cant believe that you are strong

[@mykamillz]

Great job man!!

[@ahinssu617]

im using wsl and i dont have that injections thing?

[@aaravinthan001]

How to access the OWASP juice shop

[@pinnedloiliangyang364]

Thanks for watching and commenting. For further interaction and guidance!! {W...H...A...T...S...A...P...P}[phone]

[@aaravinthan001]

@@pinnedloiliangyang364 oh sir is that you its your whatsapp number ohh god iam lucky thankyou sir

[@ofsanjay]

Always you teach something new 🙃

[@hackernee5867]

LA CAN TALK ABOUT TECHNOLOGY AND HACKING ETC

[@titzko987]

i only get 200 everywhere in bs, but works on no actual side

[@allayowan]

Hi please reply to me... Do you have any course that starts with beginner? Or do we need to have some idea on Coding?

[@alien_X1]

coding yes

[@adarshaeth]

use captcha to block this type of attacks

[@theethicalhadwani4091]

Sir as much as cracking and discovering vulnerabilities is concerned please can you make a vid of how to patch them or how to prevent such attacks and make the system secure

[@alexwest5412]

Awesome info man 👍👍

[@smrthacker8148]

Sir how to find lost Mobile can u make a video of that

[@1711kd]

Hi Loi Liang, I am not able to find sql.txt. where should I look for the file. Did I miss something

[@roblox_jrket1622]

u need a list of sql injections and put it in ur file explorer and find it there idk whats the link to download one of them but hope this helps u

[@mahdizarepoor8964]

thank you for this video . i really enjoy it and i was kind of a review . in persian : متشکرم بابت این ویدئو

[@theanonymous9110]

Your my fav hacker on lessons, you explain everything perfect all the time.... I’d like to get you on building my copyright program for creators.... do you have an email I can send you my info so you can check it out and see if you’d be interested in the project?

[@TheRushabhy2k]

not able to get " burpsuite " option on kali lin fireforx

[@samersamha5667]

waw, interesting video and trick my friend, Thats why i'm always using an advanced password manager ;)

[@akinwalefemi8728]

thanks man. appreciate that.

[@ZaneT531]

@5.43 - You have entered the username from payload but what you have entered in the password box ? could you clarify please

[@thomasschiller7698]

Is hacking android without send enything(like trojan)possible?

[@jbizzle1966]

Excellent

[@imperim]

where can i get sql.txt?

[@MusicalA-d8x]

Can we use this method for big websites?

[@hackernee5867]

LA CAN TALK ABOUT TECHNOLOGY AND HACKING ETC

[@Cat2246]

Every time I see your name my brain will convert it into Loli Liang Yang.... -.-

[@pinnedloiliangyang364]

Thanks for watching and commenting. For further interaction and guidance!! {W...H...A...T...S...A...P...P}[phone]

[@HACKINFO]

How to install dvwa

[@amansarma417]

Is it valid for nosql databases?

[@Jay-Ryujin]

I have done everything that you said but my burp isnt capturing anything. Can someone help me out?

[@MR-RUBIX9119]

What if their all 200?

[@mr.hackme7435]

Great Man 👍

[@mugilanmugil9858]

Hi , Can we change the password of windows admin account remotely? system is in workgroup

[@martinhector9337]

So my friend, Have you heard about INVESTBIA OPTIONS TRADES where alot of people make much profits these days?

[@davids2311]

Love your content

[@elyasndiaye5508]

@Loi Liang Yang - Hi mister Loi, i got some troubles with payload options for i don't have the injection folder so i tried to download some on the internet but they didn't work, where did you get yours ?

[@LoiLiangYang]

You can try this: github.com/payloadbox/sql-injection-payload-list

[@elyasndiaye5508]

@@LoiLiangYang Okey worked! Another question, why was it necessary to connect to a proxy to launch the burpsuite attack?

[@arunags1514]

@@LoiLiangYang it's not worked. I don't get 200 in the intruder attack. I only got 401 and 500

[@REMIXTER]

Very complicated 4 average people x.x

[@mohsin777]

How to secure our web application

[@skyfly4696]

ty for the video but it won't work rn