SQL Injection Attacks For Beginners (Basics)

This video explains and demos the basics of an important application security vulnerability called SQL Injections and how database systems are attacked using this technique. It is a very common issue and also listed in the OWASP Top 10. At the end mitigations are also discussed.
If you enjoy the video let me know in the comments and I will create another one with more advanced examples to help you grow your skills.
Intro 0:00
What is SQL? 0:12
Running queries and basic SQL features (using Azure Data Studio) 1:03
Visual Explanation of how a typical application is designed 4:32
Visual Explanation of SQL Injection 5:50
Example of Vulnerable Code 8:49
Exploitation Demonstration 9:40
More advanced scenarios (EXEC) 14:43
Mitigations 15:04
SQL Literals vs SQL Identifiers (Microsoft SQL Server) 15:55
Injections in comments 16:44
Wrap-up 17:28

[@real2late]

Very helpful and underrated video!

[@embracethered]

Thank you! Glad it’s helpful!! I’m just starting out to create content more consistently, and such feedback is motivating to keep going. Hopefully my content will reach more folks eventually. 🙂

[@0xrohit54]

Awesome Video sir..even though i know how SQL injection Works but your way of Explanation is increasing my Understanding Capacity ..thank you making this video and I am Waiting for all Vulnerability in OWASP TOP10 Sir

[@embracethered]

Glad to hear its useful!! Thanks!

[@vikk98]

nice sir

[@embracethered]

Thanks! Glad it’s helpful.