Skip to main content

Posts

Showing posts from June, 2020

Database Hacking Part - 4

What you should know to Advance your Database Hacking Skills  Tutorial 1 – Knowledge Base     Welcome to the fourth and last module of this workshop. The purpose of this module is to help all level of students, including people from the beginner level, to build the knowledge base in order to achieve a set level where they can gain further experience by means of setting up their own virtual home lab.    This will be a short and quick module, as we need to present the setup of the virtual lab as well as methods of hacking into databases by means of tools, which doesn’t take much time, Ahan.    In the beginning of the workshop we focused on two database servers, if you can recall, Microsoft SQL Server and MYSQL Server. However, so far we were practicing on MS SQL Server. There is a big difference in these two servers from their own architecture standpoint, however, SQL Statements remains the same and there is not much difference. However, the default views and features do differ to a larg

Database Hacking Part - 3

Walkthrough on Hacking Databases Case Study on Manually Hacking Web Applications Welcome to the third module of the “Database hacking workshop”. In this module, we will have walkthroughs on hacking databases with techniques that will show you how to hack into web applications and compromise backend databases.    We will cover SQL Injections (SQLi) that we studied in the previous module by practicing them on vulnerable web applications with the realtime SQLi testing we are executing in our lab environment. Information that can identify any sensitive information will be marked as such, however, we will help you understand this and in later modules we will also explain how you can setup a lab to practice these skills and gain more experience.   Okay, now have a quick flash back and remember the SQLi we studied in previous module; we explained one SQLi type, authentication bypass, with a walkthrough on a web application. Here we will study more with other types of SQLi so that we cover tho