Skip to content
Pluralsight Logo
  • Pluralsight
  • Skills
  • A Cloud Guru
  • Flow
  • Blog
    • Sign in to

      Sign in to Pluralsight Skills
    • Sign in to

      Sign in to A Cloud Guru
    • Sign in to

      Sign in to Pluralsight Flow
Logo for Pluralsight Skills
Pluralsight Logo
  • Sign in
  • Menu
  • Sign in to Pluralsight Skills

    Sign in to Skills

  • Sign in to A Cloud Guru

    Sign in to A Cloud Guru

  • Sign in to Pluralsight Flow

    Sign in to Flow

  • Pluralsight
  • Skills
  • A Cloud Guru
  • Flow
  • Blog
  • Why Skills?
    • Icon for Software dev Software dev
    • Databases
    • Game development
    • Mobile development
    • Programming languages
    • Web development
    • Icon for Security Security
    • Certifications
    • Governance, risk & compliance
    • Security architecture & engineering
    • Security operations
    • Security testing
    • Icon for Data & machine learning Data & machine learning
    • Big data
    • Business intelligence
    • Data visualization
    • Databases
    • Languages & libraries
    • Machine learning
    • Icon for Cloud Cloud
    • Cloud architechture & design
    • Cloud platforms
    • Salesforce CRM
    • Icon for IT Ops IT Ops
    • Client operating systems
    • Collaboration platforms
    • Configuration management
    • Containers
    • IT automation
    • Network architecture
    • Virtualization
    • Icon for Business professional Business professional
    • Office applications
    • Security awareness
    All courses
  • Top features
    • Icon for Courses Courses
    • Icon for Skill assessments Skill assessments
    • Icon for Learning paths Learning paths
    • Icon for Hands-on learning Hands on learning
    • Icon for ILT/VILT ILT/VILT
    • Icon for Analytics Analytics
    • Icon for Certification prep Certification prep
    • Icon for Labs Labs
  • Plans
  • For individuals
  • Contact Sales
  • Try for free

Contact Sales

1020 Redirect Link
Thank you!
Our team will be in touch shortly.

Loading form...

If this message remains, it may be due to cookies being disabled or to an ad blocker.

Close button
×
Labs icon Lab
Skills Expanded
Google Cloud Platform icon
Labs

Web Attacks: SQL Injection

In this lab, you’ll practice SQL injection. When you’re finished with this lab, you’ll have the ability to inject SQL into a web request to alter the query being delivered to the database.

* Our Labs are Available for Enterprise and Professional plans only.
Terms and conditions apply.
Contact sales
Google Cloud Platform icon
Labs

Lab info

Rating (140)
Level
Beginner
Duration
1h
Released
Sep 12, 2023

Lab author

Lab Author: Gavin Johnson-Lynn
Gavin Johnson-Lynn
Gavin has 20 years’ experience writing software in regulated environments and for global organisations. The last five years of his development career were spent with a focus on security, becoming the security lead for a significant payments project at a FTSE 100 company. He has experience with languages from COBOL to .Net and now often finds those skills useful when developing with Python. Gavin's experience of software security revealed a passion for security, leading him to become a speaker a... morend blogger on the subject. Gavin holds the Certified Secure Software Lifecycle Professional (CSSLP) and Scrum Master certifications and is currently part of an offensive security team, using his defensive knowledge to aid offensive security work.
  • Table of contents
  • What's a lab?
  • Prerequisites
Challenge

Getting Started in the Lab Environment

Here are the initial instructions and explanation of the lab environment. Read this while your environment is busy creating itself from nothing. Yes, this violates physics; we know. How fun!

Challenge

Inject Commands into SQL Requests

Here you’ll learn how to identify a field which has a SQL injection vulnerability. You'll then use that field to modify the SQL query being sent to a database.

Challenge

Change Logic in SQL Syntax

Here you'll be more specific with your injected code. You’ll take known information about a user (e.g. email address) and log in as that user without knowing their password.

Challenge

The Last Challenge

Welcome to the final challenge! This is your last chance to experiment in the environment. Clicking Finish Lab will end this little world that flittered into existence just for you.

Labs - code icon

Provided environment for hands-on practice

We will provide the credentials and environment necessary for you to practice right within your browser.

Labs - list icon

Guided walkthrough

Follow along with the author’s guided walkthrough and build something new in your provided environment!

Labs - analytic icon

Did you know?

On average, you retain 75% more of your learning if you get time for practice.

Recommended prerequisites

  • Basic understanding of SQL SELECT statements
  • Basic understanding of web requests and responses

Start learning by doing today

Contact sales

Contact Sales

1020 Redirect Link
Thank you!
Our team will be in touch shortly.

Loading form...

If this message remains, it may be due to cookies being disabled or to an ad blocker.

Close button

Ready to skill up
your entire team?

20
Subscriptions
Need more subscriptions? Contact sales.
Continue to checkout Continue to checkout
Cancel

With your Pluralsight plan, you can:

With your 30-day pilot, you can:

  • Access thousands of videos to develop critical skills
  • Give up to 50 users access to thousands of video courses
  • Practice and apply skills with interactive courses and projects
  • See skills, usage, and trend data for your teams
  • Prepare for certifications with industry-leading practice exams
  • Measure proficiency across skills and roles
  • Align learning to your goals with paths and channels

Ready to skill up
your entire team?

10
Subscriptions
Need more subscriptions? Contact sales.
Continue to checkout
Cancel

With your Pluralsight plan, you can:

With your 30-day pilot, you can:

  • Access thousands of videos to develop critical skills
  • Give up to 50 users access to thousands of video courses
  • Practice and apply skills with interactive courses and projects
  • See skills, usage, and trend data for your teams
  • Prepare for certifications with industry-leading practice exams
  • Measure proficiency across skills and roles
  • Align learning to your goals with paths and channels
  • Support

    • Contact
    • Help Center
    • IP Allowlist
    • Site Map
    • Download Pluralsight
    • Skills Plans
    • A Cloud Guru Plans
    • Flow Plans
  • Community

    • Guides
    • Teach
    • Partner with Pluralsight
    • Affiliate Partners
    • Pluralsight One
    • Authors
  • Company

    • About Us
    • Careers
    • Newsroom
    • Resources
  • Industries

    • Education
    • Financial Services (FSBI)
    • Healthcare
    • Insurance
    • Non-Profit
    • Public Sector

Newsletter

Sign up with your email to join our mailing list.

1041 Redirect Link Form Submitted Successfully!

Loading form...

If this message remains, it may be due to cookies being disabled or to an ad blocker.

  • Facebook Logo Icon
  • Twitter Logo Icon
  • Instagram Logo Icon
  • LinkedIn Logo Icon
  • Youtube Logo Icon
Pluralsight Logo Copyright © 2004 - 2023 Pluralsight LLC. All rights reserved
  • Terms of Use
  • Privacy Notice
  • Modern Slavery Statement