During the section I would be covering Sequent injection attack sequel injection attack is considered
one of the top 10 attacks that till today.
Many Web site get compromised because of sequel injection.
We're gonna start from scratch and I will try to dive deeper and deeper into sequel injection.
Getting Mew getting you as much example as I can.
So first we're going to explain what a sequel injection and where is the weakness in any website that
allow any attacker to use sequel injection to get access to the website.
Then we're going to try to use a sequel injection and we're going to try to get all information in the
database that could include users and password and maybe confidential information like Social Security
or credit card.
Definitely will not do anything illegal but I'm gonna show you how it's easy to dump all this information
using secret injection.
Then we will be taking some real life scenarios and I'm going to show you realistically how can you
do that.
And I'm gonna give you some assessment as well.
But my point here do not try is that life unless you have permission.
This is illegal.
It can cause you a lot of problems.
So whatever we are doing it would be done in a simulation environment.
Yes we can do some life example on some site.
Some of them are already hosted for testing and some of them were just going to start the process but
we will not resume just to make sure that we are not doing anything illegal.
So you need to be aware when to stop the attack and do not try to break a new rule.
This is very important.
While you are doing that.
So let's start.
And let's see what is sequel injection and how to use sequel injection to do a full attack on a website.
Getting full access on the website as an admin dumping all the information on the database and we going
to use a specific tool in clinics that allow us to do that.
So let's see.